Wallet-authenticated: provisions agents, sets policy, approves & denies.
Autonomous & holds no keys — calls governed tools over HTTP.
Walletless — independently verifies the on-chain audit trail.
The agent holds no private keys. One OWS vault signs both chains — Solana ed25519 + Mantle secp256k1.
Every action is evaluated before settlement: auto-approve · human approval · denied. The agent cannot bypass it.