How authorization works

The agent formulates an intent. Unigate determines whether the intent is permitted. The owner retains final authority.

The pipeline

  1. 1 · Asset Registry. Is this asset and route supported? Only assets in the signed, versioned registry are executable. The agent may explain from it but can never invent a token address, issuer rule, or venue.
  2. 2 · Eligibility preflight. Do token and issuer checks pass? What gets read depends on the instrument, and the gate says which. ERC-3643 tokens are asked canTransfer, identity verification, frozen flags and paused state. Robinhood Chain stock tokens are plain ERC-20s with an ERC-8056 multiplier and no such interface — for those it reads the pause flags, the issuer access-controls registry's block-list (checked on sender, receiver AND the venue), the balance and the allowance. Before spending gas. A pass is a cost-saving prediction, never a legal determination: the token contract runs the same checks again at execution.
  3. 3 · Private policy. Is it inside your limits? Evaluation runs in a local engine; only a commitment digest leaves it. The agent sees pass/fail — never a threshold, balance, or your strategy.
  4. 4 · Risk engine. Are route, price and slippage within bounds? Prices come from a signed, timestamped quote service. A stale quote is never approvable. The model has no path into pricing.
  5. 5 · Approval. Acquisitions, sales, transfers and redemptions bind to one exact intent — hash, amount, route, expiry — signed by you. Replay is impossible; expiry is short by design.

Each gate can only narrow what happens. The agent’s text can never widen it.

What the agent can and cannot do

Can

  • Explain assets from the signed registry
  • Read external pages — always tagged untrusted
  • Draft one thing: a typed, schema-checked intent
  • Ask you a clarifying question

Cannot

  • Hold or see your keys, balances, limits, or history
  • Determine legal eligibility or override a token contract
  • Change your policy — edits require your signed diff
  • Execute anything, or widen any scope, ever

Honest boundaries

Unigate is not a custody provider, broker, issuer, KYC provider, investment adviser, or autonomous investment manager. Any AI commentary is labeled explanation — never an authoritative eligibility or investment determination. If the entire backend were malicious, it still could not spend: execution happens only through your smart account, bound to your signature and an on-chain-verifiable scope.