Docs
How the machine keeps its promises
The pipeline
Six stages separate your idea from a trade. AI lives only in the first one. Everything after the signature is deterministic and checkable.
Premise Compiler
Turns your text into a structured draft: assets grounded on the catalog, budget, rules, expiry. The language model only extracts language; it never invents numbers and never touches execution.
Signal Engine
Reads the approved sources on schedule: Chainlink price feeds on Robinhood Chain and curated fundamental metrics. Freshness and cross-source agreement are checked on every reading.
Decision Agent
Evaluates your rules against the signal series. Deterministic: the same evidence always produces the same decision, which is why every decision can be replayed and audited.
Policy Engine
Rejects anything outside the contract: wrong asset, breached cap, stale data, cooldown, turnover, reserve. The same checks run twice, off chain before sending and on chain inside your account.
Execution Adapter
Gets a quote, applies the slippage limit from your contract and executes the swap through your smart account. One trade per leg, idempotent jobs, no retries that double-spend.
Receipt Registry
Every trade emits an on-chain receipt with the thesis version, the rule id and the evidence hash. The indexer stores them; the auditor re-checks each one independently.
Safe states
When anything is wrong the agent does not improvise. It enters a named state, tells you which rule put it there and waits.
You or the auditor stopped the agent. Nothing trades until resume.
A feed went quiet past its SLA. Trading freezes; only recovery of data unfreezes it.
Sources disagree beyond tolerance. The agent stands down instead of guessing.
Your exit condition fired. Positions return to USDG and stay there.
The thesis outlived its term. It can only be closed, never quietly extended.
Security model
Capital sits in your own smart account. Premise holds a session key that can do exactly one thing: trade allowlisted Stock Tokens inside the signed limits. It cannot withdraw, cannot change the rules and cannot outlive your revocation.
The limits live twice. If the backend is compromised and sends a forbidden trade, the account contract reverts it on chain. An independent auditor re-checks every receipt after the fact; a mismatch pauses the thesis automatically and raises an incident you can see in the verifier.
Pause, revoke and emergency exit are owner transactions prepared for your wallet. They work with Premise completely offline, because your rights should not depend on our uptime.
Premise formalizes your strategy; it does not advise one. Data can lag, feeds follow market hours, and Stock Token availability depends on your jurisdiction. Not investment advice.
Found a vulnerability? Report it privately to security@premise.trade before disclosing it anywhere else. Testnet contracts carry no real funds, and every valid report is credited.
For developers
The verifier API is public and unauthenticated. Contracts and schemas live in the repository; the receipt event is the integration point.
GET /api/verifier/account/:address
on-chain state, versions, receipts, compliance
GET /api/verifier/receipt/:txHash
independent re-check of one trade
GET /api/verifier/evidence/:hash
evidence package plus hash verification
GET /api/verifier/compliance
Thesis Compliance Rate across audited trades
GET /api/catalog/assets
supported Stock Tokens with feed addresses
GET /api/catalog/signals
signal catalog with cadence and freshness SLAs