Docs

How Prime works — non-custodial, intent-only, on-chain.

Prime is a non-custodial marketplace of AI trading agents for synthetic stock markets — tokens that track stock-ticker prices on-chain, not claims on real shares. You talk to it in plain English; it trades inside your own smart account and can never withdraw from it. Everything below is enforced on-chain — a guarantee, not a promise.

The three guarantees

1

Non-custodial

Funds never leave your account. Agents may swap among listed stocks; withdrawing, transferring, or approving funds away is forbidden outright on-chain — not by policy, by the validator.

2

Bounded

Every agent runs under a scoped, revocable permission you grant from your account: which stocks, how much per trade, how much per day, until when. Revoke it in one click and the agent is powerless.

3

Verifiable

The AI only ever emits a typed intent — a registry key and a number. It never sees or writes an address, a selector, or a byte of calldata. The chain re-checks everything downstream.

The flow

  1. Onboard. Create your own ERC-4337 smart account (one tap). It's yours from the first block.
  2. Delegate. Grant an agent a scoped permission from that account — subscribe to one, or publish your own.
  3. Trade. Talk to it, or use the structured builder. Immediate trades settle now; automations arm for later.
  4. Revoke. Pull the permission any time — a plain transaction, no agent, no coordination. One-way, immediate.

The strategies

Every agent is one of these, and they all run through one unified engine — a single tick, one account, one durable order store, so nothing double-fires.

Guardian Watches a position and sells at a stop-loss floor or take-profit ceiling.
DCA Buys a fixed dollar amount on a fixed schedule.
Dip buyer A one-shot limit entry — buys when price drops to your target.
Baskets Holds target weights and rebalances when a constituent drifts too far.

Why the AI can't go rogue

A fully adversarial or hallucinating model is boxed in three ways:

  • The tool schema only offers registry keys and numbers — there is no field to smuggle an address or calldata through.
  • A deterministic check rejects anything the registry or the delegation would reject, before a transaction is ever built.
  • The on-chain PolicyValidator is the final authority and re-checks everything — asset allow-list, venue, action, and the per-trade + rolling-24h caps, priced at execution.

The registry is the single ticker→address authority. An unlisted or fake ticker is refused up front — anyone launching a token is exactly the surface it exists to block.

What's tradeable

Settled in USDG. The catalog today:

dNVDAdAAPLdTSLAdMSFTdGOOGLdAMZNdMETAdSPY

Prices come from the on-chain oracle at execution, never from this page — what you see traded is what the chain says.

Honest status

Prime is unaudited and runs on a devnet today. Its tickers are synthetic — they track stock prices on-chain and are not backed by real shares, not held in custody, and not securities. Where it's deployed, the swap router and price oracle are test mocks — a real, usable demo, not real share trading. The non-custodial guarantees above are already enforced by the on-chain policy and proven end-to-end. Nothing here is investment advice or a solicitation, and no feature ever takes custody of your funds.