Give the session a scope
Start with a budget you can explain. Separate what the Agent may inspect from what it may propose.
budget → allowed actions → stop ruleA session budget. A list of allowed actions. A stop rule before the first signature. GUARDPOD turns those decisions into an execution brief you can inspect.
POD / SESSION SENTINELyou › Set up a bounded Agent session.
→ inspect_policy() READY
Budget: 100 USDT. Allowed: read, quote.
Signing remains with your wallet.
These are planning limits. A real execution account must independently enforce its own on-chain permissions.
Start with a budget you can explain. Separate what the Agent may inspect from what it may propose.
budget → allowed actions → stop rule
Try a blocked action, an oversized request or a paused session. The policy desk tells you which condition fails.
inspect_policy → check_action
Send the complete brief to your Agent. The next signature still requires a verified destination, current quote and your approval.
preview → owner review → receiptA small set of verbs, each with an explicit boundary. Click a row to test it at the policy desk.
A clear plan reduces ambiguity. It does not replace the actual contract checks that protect an execution account.
| ACTION | AGENT PLAN | OWNER |
|---|---|---|
| Read and inspect | ✓ | ✓ |
| Prepare a quote | ✓ | ✓ |
| Propose a trade | IF ENABLED | REVIEW |
| Exceed session budget | ✕ | REVISE PLAN |
| Send to another wallet | ✕ | SEPARATE ACTION |
| Sign a transaction | ✕ | EXPLICIT SIGNATURE |

READ THE DESTINATION.
CHECK THE METHOD.
KEEP THE RECEIPT.
No. Connecting a wallet shares its public address. The policy desk stores settings locally and does not request transfers or approvals.
The editor checks the plan you write here. A live execution account must have separately verified contracts that enforce the intended limits on chain.
Yes. Save a policy and copy the generated instruction. It asks the Agent to verify targets, show a transaction preview and stop for your signature.
New action checks are refused until you resume the plan. This local control does not pause any unrelated deployed contract.
In your browser. Export important records before clearing storage or changing devices.