AI Wallet Control

Inspect bearer-scoped Signed Workload Identity bindings, versioned wallet policies, native-asset budgets, retained decisions, and execution-readiness evidence, and preview policy admission without creating transaction state.

BUSINESS CASES

Where this module fits

agent wallet inventory
native-asset budget and policy review
side-effect-free intent evaluation
retained decision and readiness reconciliation

PRIMARY CONSUMERS

Who integrates it

AI platform operators
automation developers
treasury risk teams

PREREQUISITES

What must exist first

an authenticated workspace principal
ai-wallets:read for projections or the separate ai-wallets:evaluate scope for dry-run evaluation
an existing Signed Workload Identity binding and independently enrolled AI operational wallet

RECOMMENDED WORKFLOW

Compose the module safely.

01
discover a bearer-scoped workload binding and independently enrolled operational wallet
02
read current and historical policy commitments, per-asset budgets, retained intents, activity, approvals, and execution mode
03
evaluate a typed proposal without creating an intent, reservation, event, approval, transaction, signature, or broadcast
04
re-read governing resources before any separately authorized downstream action

AGENT INTEGRATION

Machine-use boundaries

Workspace, profile, and role come from the bearer and cannot be selected in the request.
Preserve native-asset amounts as exact decimal strings and never aggregate unlike assets or interpret the summary currency as fiat.
POLICY_APPROVED and retained approval records are policy and review evidence, not transaction construction, signing, broadcast, confirmation, or settlement authority.
The intent-evaluations operation is a side-effect-free preview: execution_created, reservation_created, and event_created remain false.
Binding lifecycle, policy replacement, retained intent creation, approval actions, signing, and broadcast remain unavailable until separately enabled in production OpenAPI; fail closed when any policy, budget, identity, workspace, network, or readiness context cannot be verified.

Register only production-listed routes as executable tools, and re-fetch the deployed OpenAPI before generating or sending a request. Source-ready routes awaiting deployment are preparation references; planned contracts are non-executable.

CURRENT SAFE MILESTONE

The production surface provides eleven authenticated reads and one separately scoped, side-effect-free intent evaluation. It can explain bindings, policies, native-asset budgets, retained decisions, approvals, and autonomy gates without changing wallet or transaction state. Seven lifecycle and retained-intent operations remain planned. Transaction construction, approval actions, MPC signing, emergency execution changes, and broadcast are not public operations.

MODULE CONTRACTS

Every mapped endpoint

Each operation states whether its request shape is authoritative in OpenAPI, reviewed as a planning profile, or intentionally left as an outline pending an owner schema.