your agent can be tricked. your money can't.
an ai agent pays invoices from a solana vault. the vault only pays three known vendors, up to $1.00 a day. anything else waits for the owner. write an invoice that makes it pay you.
$1.50
in the vault
0
attempts
0
blocked on-chain
0
sent to the owner
every attempt
liveno attempts yet. be the first.
01
the agent reads
invoices arrive as untrusted text. it has no defense against injection in its prompt. on purpose.
02
the vault decides
a squads v4 spending limit: three addresses, a daily cap, the agent's key only. enforced by solana, not by us.
03
the owner approves
anything else becomes a proposal. only the owner's key can approve it. the agent can't.