Skip to content

    AgentGuard · Control Plane

    AgentGuard Control Plane

    The black box, mandate firewall, and settlement workflow layer for AI agents that touch money.

    AgentGuard checks proposed actions against recorded mandates and policy, preserves action records, and routes incidents through an auditable settlement-review workflow.

    Authority before action

    An agent’s request should meet a clear limit.

    AgentGuard gives a partner’s systems a place to evaluate an agent’s proposed action before execution. Connect the agent identity and recorded mandate to policy rules, a decision with reasons, and a receipt describing what actually happened.

    Who it helpsAI product teams, platform operators, partner risk teams and compliance reviewers.

    AgentGuardWorkflow illustration
    01 / 03Define the authorityConceptual flow · no live account data

    Explore the process

    You start with

    Agent identity, mandate and a proposed action

    You leave with

    An approval, escalation or block with a reviewable record

    An example journey

    A permitted purpose, an unexpected recipient.

    An agent requests an action within its amount limit, but the counterparty needs review. The request can be escalated with the relevant policy reason, giving a person the context to decide before the partner’s system proceeds.

    Discuss AgentGuardRead the governance approach

    Three pillars

    Mandate. Evidence. Settlement.

    Mandate Firewall

    Requests submitted to AgentGuard are checked server-side against recorded scope, limits, counterparties and policy. The partner system must enforce the returned decision before proceeding.

    • Per-agent mandates
    • Counterparty classification
    • Daily caps and policy guards

    Action Black Box

    Record the supplied action payload, authorization decision and received receipt. Integrity hashes link related audit events for authorized review.

    • Authorization records
    • Execution receipts
    • Hash-chained audit events

    Settlement Workflow

    When an action goes wrong, AgentGuard opens an incident case, verifies evidence, and routes it into partner-approved settlement instructions.

    • Incident verification
    • Multi-party approval
    • Partner-approved settlement

    Why now

    Agentic payments are arriving faster than agent oversight.

    AI agents are starting to call payment protocols, x402-style flows, stablecoin transfers, partner payouts, and wallet actions on behalf of organizations. Most of those actions ship with no mandate verification, no consistent audit trail, and no settlement path when something goes wrong.

    AgentGuard sits in front of those actions: it checks the mandate, evaluates policy, records hash-chained evidence, and gives partners a structured way to verify incidents and approve settlements.

    Architecture

    An extension of Cryptodam's incident protection architecture.

    AgentGuard extends Cryptodam's digital-asset incident protection architecture into AI-agent-driven financial actions. The same modules that govern monitoring, trigger verification, eligibility, and payout workflows are reused to verify agent mandates, classify action attempts, and route verified incidents into partner-approved settlement.

    • Policy enforcement
    • Mandate verification
    • Incident verification
    • Settlement workflow
    • Payout instruction
    • Partner-approved settlement

    Integration

    Partner endpoints.

    Partners integrate AgentGuard through scoped API endpoints. Credentials and scopes are managed in the Partner Console — no secrets are exposed on this page.

    MethodPathPurpose
    POST/functions/v1/agentguard-authorize-actionEvaluate a proposed action against mandates and policy.
    POST/functions/v1/agentguard-record-action-receiptRecord execution payload and produce an evidence trail.
    POST/functions/v1/agentguard-x402-webhookInbound x402-style payment-protocol receipts.

    Product boundary

    What AgentGuard is — and is not.

    AgentGuard is

    • Policy enforcement for agent actions
    • Mandate verification before execution
    • Incident verification with hash-chained evidence
    • Settlement workflow into partner-approved resolution

    AgentGuard is not

    • Licensed insurance
    • A guaranteed-payout product
    • An underwriting service
    • A custody or wallet provider