Agent Governance Architecture

AI Agent Policy Infrastructure

Giving autonomous software unconstrained custody of private keys is a catastrophic design flaw. Apraxus wraps agent wallets in cryptographically enforced policy envelopes with deterministic spend ceilings.

TARGET ARCH

Delegated Key Derivation

Human master operators sign cryptographic root delegations. The agent executes via ephemeral Ed25519 sub-keys with cryptographic boundaries bound to its public key digest.

`master_key.derive_agent_envelope()`

Time-Lock Spending Ceilings

Prevents infinite drain loops. Each envelope limits maximum cumulative spending across rolling windows (e.g. 50 USDC/hr), validated deterministically on-chain before transaction queueing.

`spend_window.enforce_ceiling()`

Instant State Revocation

In the event of an anomalous prompt injection or aberrant model behavior, operators broadcast a single-byte revocation payload that instantly invalidates the envelope across all active network nodes.

`revocation_registry.invalidate_id()`
LIVE PRODUCT DEMO

APXS Agent Payment Console

Test a policy-controlled payment flow where an AI agent can only spend within operator-defined boundaries.

Agent Policy
Agent
Apraxus Agent
● Active
Connected Wallet
Connect via MetaMask when executing
Daily limit
100 APXS
Spent today
0 APXS
Remaining
100 APXS
Per transaction
10 APXS
Payment Request
APXS

Delegated Key Hierarchy

Human operators hold sovereign master keys. Ephemeral agent sub-keys are derived using Ed25519 scalar multiplication bound to a cryptographic policy envelope digest.

Rolling Time Windows

Spending limits are tracked via rolling epoch accumulators. Even if an agent loops infinitely, cumulative expenditures cannot exceed the operator’s predefined ceiling.

Deterministic Revocation

Single-byte emergency revocation payloads propagate through the mempool instantly, rendering rogue sub-keys invalid across all active validators in <100ms.