Просмотр новости
Найдите то, что Вас интересует
Спутники
РН
SpaceX
Роскосмос
NASA
СпутникиРНSpaceXРоскосмосNASA
Discussion topic for ERC: AI Agent Proof-of-Safety Attestation & Transaction Guard Standard (IAgentTransactionGuard)
Update Log
2026-09-13: Initial draft specification and reference implementation released on GitHub: nohosa001-pixel/security-gate-x402
External Reviews
2026-09-13: Tested and verified against Gnosis Safe{Wallet} Polygon Mainnet contracts. None formal external audits as of 2026-09-13.
Outstanding Issues
None as of 2026-09-13. (Seeking community feedback on replay protection nonces vs. batch expiration timestamps).
eip: <to be assigned>
title: AI Agent Proof-of-Safety Attestation and Transaction Guard Standard
description: Standardized EIP-712 cryptographic safety attestation and execution guard for autonomous AI agent smart contract accounts.
author: Security Gate x402 Architecture Team (@nohosa001-pixel)
discussions-to: https://ethereum-magicians.org/
status: Draft
type: Standards Track
category: ERC
created: 2026-09-13
requires: 712, 1271, 4337
Abstract
This standard specifies an on-chain interface and cryptographic verification flow for autonomous AI agents executing financial transactions via smart contract accounts (such as Gnosis Safe multisigs and ERC-4337 Smart Accounts).
It introduces IAgentTransactionGuard and IAgentCreditOracle, preventing unauthorized treasury drains, adversarial prompt injection attacks, and hallucinated transaction calls by requiring signed EIP-712 safety attestations before transaction finality.
Motivation
As autonomous AI agents manage decentralized treasuries, execute high-frequency arbitrage, and interact with DeFi protocols, existing smart contract architectures lack deterministic mechanisms to verify whether an agent’s transaction payload has been verified against:
Adversarial prompt injection attacks (e.g. DAN prompts, indirect instruction hijacking via untrusted inputs).
Systemic hallucinations or arithmetic discrepancies in transaction calldata.
Budget and velocity limits (preventing infinite loops from draining agent treasuries in gas or slippage).
By defining an interoperable standard:
Any autonomous agent runtime (ElizaOS, LangChain, AutoGen, CrewAI) can obtain standardized cryptographic safety attestations before submitting transactions.
Any smart contract account (Safe, ERC-4337 account) can enforce deterministic verification through standard transaction guards without proprietary vendor lock-in.
Specification
The standard comprises two core interfaces:
1. IAgentTransactionGuard
// SPDX-License-Identifier: MIT
pragma solidity ^0.8.20;
interface IAgentTransactionGuard {
struct SecurityAttestation {
bytes32 payloadHash;
uint8 riskScore;
string verdict;
uint256 expiresAt;
uint8 v;
bytes32 r;
bytes32 s;
}
event SafeTransactionGuarded(address indexed safe, address indexed to, uint256 value, uint8 riskScore);
function checkTransaction(
address to,
uint256 value,
bytes memory data,
uint8 operation,
uint256 safeTxGas,
uint256 baseGas,
uint256 gasPrice,
address gasToken,
address payable refundReceiver,
bytes memory signatures,
address msgSender
) external;
function checkAfterExecution(bytes32 txHash, bool success) external;
}
2. IAgentCreditOracle
// SPDX-License-Identifier: MIT
pragma solidity ^0.8.20;
interface IAgentCreditOracle {
struct AgentCreditProfile {
address agentAddress;
uint16 creditScore; // 300 to 850 (Standard FICO Scale)
uint256 uncollateralizedCreditLimit;
uint256 totalAuditedVolume;
uint32 consecutiveSafeTxCount;
uint256 lastAuditTimestamp;
bool isBlacklisted;
}
event CreditProfileUpdated(address indexed agent, uint16 newScore, uint256 creditLimit);
function getCreditProfile(address agent) external view returns (AgentCreditProfile memory);
function verifyProofOfSafety(bytes32 payloadHash, bytes calldata signature) external view returns (bool isValid, uint8 riskScore);
}
Rationale
EIP-712 Compatibility: Struct hashing ensures off-chain security evaluation oracles can sign machine-readable payloads with verifiable domain separation, preventing replay attacks across different chains or smart accounts.
Composable with ERC-4337 & Safe: Matches existing Safe ITransactionGuard signatures and can be extended into an ERC-4337 IPaymaster or IAccount validation module.
Latency Consideration: Verification takes place off-chain (<5ms micro-oracle) and only the cryptographic signature is verified on-chain, keeping EVM execution gas minimal (~25,000 gas).
Reference Implementation & Live Demo
A fully working, tested reference implementation and live interactive showcase are available:
Live Interactive Showcase (Sheriff Agent & Safe Guard): https://agent-security-gate-x402-212942243360.asia-northeast3.run.app/dashboard
Gnosis Safe{Wallet} App Store Certified: Open in Safe{Wallet} (Polygon Mainnet)
Deployed Verified Contracts (Polygon Mainnet):
SafeSecurityGateGuard.sol: 0x5cC5Afa2a97599d492A3E408Fdd95fD0b520f173
AgentCreditRatingOracle.sol: 0x6418f408cFf03F862D7691f01fAb00a895E6aB93
Open Source Repository: https://github.com/nohosa001-pixel/security-gate-x402
We Welcome Community Feedback
We are seeking input from the Ethereum standards community and Smart Account/Safe builders:
Should SecurityAttestation include a nonce field for strict sequential transaction ordering, or is expiresAt sufficient for micro-batches?
How should multi-oracle consensus (threshold signatures) be structured for ultra-high-value treasury movements?
2 posts - 1 participant
Read full topic
| # | Наименование новости | Тональность | Информативность | Дата публикации |
|---|---|---|---|---|
| 1 | ERC-8419: Know-Your-Agent (KYA) Framework | 0 | 13.66 | 19-09-2026 |
| 2 | All Core Devs - Testing (ACDT) #96, September 14, 2026 | 0 | 16.55 | 07-09-2026 |
| 3 | All Core Devs - Testing (ACDT) #97, Sept 21, 2026 | 0 | 24.61 | 15-09-2026 |
| 4 | RPC Standards # 34, September 7th, 2026 | 0 | 24.01 | 06-09-2026 |
| 5 | ERC-8414: Token-Bound Task Tenders | 0 | 10.19 | 05-09-2026 |
| 6 | ERC8415-Kit: Reference Implementation Now Public (CC0) | 0 | 13.08 | 17-09-2026 |
| 7 | EIP Editing Office Hour (EIP + ERC ) Meeting #113, Sep 15, 2026 | 0 | 20.46 | 07-09-2026 |
| 8 | ERC-8416: Epoch-Based Fixed-Rate Vault | 0 | 31.35 | 14-09-2026 |
| 9 | All Core Devs - Execution (ACDE) #246, September 24, 2026 | 0 | 17.28 | 14-09-2026 |
| 10 | ERC-8418: Itemized Non-Fungible Token | 0 | 8.33 | 15-09-2026 |