Halo
The ring. Two tones of light around the agent. It is the visible edge of what is allowed.
- Gold arc
- power granted
- Blue arc
- the boundary that holds
- Moves
- only when you move it
00 Briefing · Power, with a boundary
Give your agent power. Draw where it stops.
Agent Halo is the ring of light around your AI agent: set what it can spend, what needs approval, and exactly where its power stops — before you ever hand over the keys.
- SpendWhat the agent may move, and how much.
- ApproveWhat waits for you before it happens.
- StopWhere its power ends. No exceptions.
01 Two parts, one rule
A ring, and what it holds.
Core
The agent. Small, bright, eager to work. It acts inside the ring and never outside it.
- Brightness
- full, by design
- Position
- always inside the ring
- Keys
- after the ring is drawn
Point at the stage. The core follows. The ring decides how far.
02 Rules of the ring
Five clauses. Read once. They hold every time.
-
R-01
Spending cap
The core may spend up to the cap, per transaction and per day. Not one unit over.
per_tx ≤ cap · per_day ≤ daily_cap -
R-02
Approval threshold
Above the threshold, the request stops and waits. You approve it, or it does not happen.
amount > threshold → hold for owner -
R-03
Allowed actions
Only the actions you list. A swap is not a transfer. A transfer is not an approval.
action ∉ allowlist → stop -
R-04
Hard edges
Some edges never move. No unlimited token approvals. No handing over keys or seed phrases.
approve(max) → stop · export(key) → stop -
R-05
Ring first, keys second
The limits are set before the agent holds anything. The order does not change.
draw(halo) → then hand over
03 Draw your halo
Set the limits. Send a test request. Watch the ring answer.
This composer runs in your browser. It writes a rule sheet. It moves nothing.
04 The token
$AGENTHALO
The ticker of the ring. Its contract address lives in this slot.
CA