[Rules for AI agents, enforced on Solana]
Write the rules once.Your agent can’t break them.
Edict is a vault for AI agents on Solana. Your agent gets its own key and a budget, and every move it makes is checked by the program first: caps, allowed programs and wallets, a wait on big moves, and a freeze you can pull at any time.
- Checks
- 4 per move
- Caps roll over
- any 60 min
- Freeze
- 1 tap
Live demo · every verdict comes from Edict’s rule engine
[How it works]
From an empty wallet to a guarded agent.Five steps, five minutes.
You create the vault from your wallet, write the rules, list what the agent may touch, fund it, and hand the agent a key that can only ask. Each step is one transaction you can read on Solscan.
Read the quickstartFrom your own wallet. You are the owner; a guardian key is optional.
[Rules]
A move asks four questions.If one answer is no, nothing moves.
The rules live in the program, not in your agent’s prompt. A prompt can be talked around. A Solana program can’t: it asks the same four questions on every move, in the same order.
Read the rulebookIs the vault open? You or your guardian can freeze it in one tap, and three refused moves in ten minutes freeze it on their own.
Is the destination on your list? Swaps go to programs you allowed, payments go to wallets you allowed. Nothing else gets a signature.
Is it within the caps? Per move, in any 60 minutes, in any 24 hours. The windows roll, so there is no hour boundary to spend across.
Is it a big move? Over the hold line it waits six hours, and you can cancel it. If nobody releases it in time, it expires.
[Try it]
Pick a move.See which rule answers.
This is Edict’s rule engine on a demo vault: 5 SOL a move, 10 SOL in any hour, Jupiter and Kamino allowed, two known wallets, holds over 20 SOL. Try your agent’s moves, then try what a thief would do with its key.
Pick a move on the left.
[Caps]
What your agent spendsnever passes what you allowed.
Fixed hourly buckets let an agent spend the cap at 10:59 and again at 11:01. Edict’s windows roll: 10 SOL an hour means 10 SOL in any 60 minutes, and the day cap works the same way over any 24 hours.
How the windows roll09:58 · refused, over the 60-minute cap · nothing moved
Every square is a quarter hour. The brighter it is, the more the agent moved; the coral ones are moves the window refused because the last 60 minutes were already full.
[Recovery]
Lose the agent,not the vault.
If an agent’s key leaks or its prompt gets hijacked, the damage stops at the caps. Refusals trip the freeze, you hand the agent a new key, and you carry on. Your own wallet can always pull the funds out.
- Balance deltaevery vault token account the call touched, read before and after
- No approval lefta delegate on any vault account undoes the whole call
- Owner unchangednobody can take over a vault token account
- SOL countedlamports leaving the vault count toward the caps
- Owner rescueyour wallet can withdraw at any time, even while frozen
- Programs
- Jupiter, Kamino
- Hold line
- 20 SOL
- Recipients
- 12 wallets
- Hold line
- 2,000 USDC
- Programs
- Kamino, Marginfi
- Hold line
- 10,000 USDC
- Programs
- Drift, Phoenix
- Hold line
- off
[Token]
The program is free.The coin is EDICT.
EDICT is the project’s coin on Solana, launched on Pump.fun. You never need it to use a vault: every agent can use the program. The coin is how the project is funded and followed while the program grows.
- Contract
- posted on X at launch
- Network
- Solana
- Launch
- Pump.fun
- Supply
- 1,000,000,000
[Questions]
Read the answersbefore you hand over a key.
What does Edict need to start?
A Solana wallet for you, a fresh key for your agent, and a few minutes. You create the vault, write the rules and fund it. The agent only ever holds its own key, and that key can only ask.
Which agents work with it?
Anything that can sign a Solana transaction: ElizaOS, Solana Agent Kit, a Python script, your own bot. The agent calls Edict instead of the target program; Edict checks the move and makes the call for it.
Who holds the funds?
The vault does: an address only the Edict program can sign for. Your wallet is the owner and can withdraw at any time, even while the vault is frozen.
What if the agent’s key leaks?
The thief gets what the agent had: the caps. Moves to new wallets or new programs are refused, refusals trip the freeze, and you rotate the key from your wallet.
What if the agent gets prompt-injected?
Same answer. Edict doesn’t read the prompt, it reads the transaction. A hijacked agent can only make the moves your rules already allow.
Can a refused move be forced?
No. Only the owner can change the rules, rule changes are their own transactions, and they are visible on chain the moment they land.
Which rules run on chain?
All four: the freeze, the program and wallet lists, the caps per move, per 60 minutes and per 24 hours, and the hold line. They run inside the program on every move, before anything leaves.
How are caps counted on a swap?
By balance. Edict reads every vault token account the call touches before and after, and counts what left. That works for any program, not only plain transfers.
Do I need the coin to use it?
No. The program is free for every agent. EDICT is the project’s coin on Pump.fun; holding it is not required for anything.
[Your agent]
Write your first rule.Edict checks the rest.
Create a vault from your wallet, set a cap and hand your agent a key. It takes about five minutes, and the first rule is the one that matters.