hunch.New: configurable mandates for V3 and Hookr V4 ↗
EXECUTION GUARD / V0.6 / RH MAINNET
Give the next
transaction a boundary.
An agent proposes ETH → NVDA. Hunch checks the exact call, the stock-token units and the live dependencies. Your trusted signer enforces the result.
One supported route · EOA wallets · Read-only checks on this page
INPUTNative ETH
→ROUTEUniswap V3
→EXPOSURENVDA stock token
→BOUNDARYReceipt + signer gate
01 / EXACT INTENT
Prepare a real transaction.
Use an EOA with ETH on Robinhood Chain. This page makes read-only calls; it never connects a wallet, signs or submits a trade.
Ready to read the supported route.
Review the operator intent
The signer integration must receive an operator-approved intent. An agent must not set or relax these limits.
Exact unsigned transaction + intent
02 / EVIDENCE → DECISION
Awaiting your check.
Inspect the actual route before the signing step.
ED25519 RECEIPT
Inspect signed receipt
Change the proposal. See the refusal.
These buttons send altered copies to the live evaluator. No transaction is submitted.
03 / DURABLE DEPENDENCY EVIDENCE
Know what changed.
Every 60 seconds, Hunch records the public route dependencies. Runtime hashes, implementation wiring, unit changes and pause state are signed and retained for 14 days. Sampling can miss changes between observations.
| Contract dependency | Address | Verification |
|---|
Latest observation and recent change history
Open signed observation JSON ↗04 / TRUSTED RUNTIME INTEGRATION
A check that reaches the signer.
The downloadable JavaScript adapter accepts a fixed operator intent and a pinned receipt key. It evaluates, verifies, revalidates and only then invokes your account’s signing function. Errors, mismatches and stale receipts stop that path.
import { createGuardedSigner } from './hunch-guard-sdk.mjs';
// Set these in the trusted runtime, outside the model's control.
const signer = createGuardedSigner({
account: yourLocalOrHardwareAccount,
operatorIntent: approvedIntent,
publicKey: reviewedReleasePublicKey
});
// Expose this gate to the agent, never the account or raw signer.
const { serializedTransaction, receipt } =
await signer.sign(proposedTransaction);
// Broadcasting is a separate operator-controlled step.Keep the account, policy configuration and alternate signing interfaces inaccessible to the model. The SDK cannot prevent a separate application from bypassing it. The nonce lock is per adapter instance; a multi-process wallet needs its own shared nonce coordinator. A delay after signing requires a new preflight before broadcast.
Signer SDK · Codec dependency · Receipt verifier dependency · REST & integration reference ↗
05 / REPRODUCE THE CLAIMS
Inspect it. Run it. Challenge it.
Download the source and tests, verify its SHA-256 against the release manifest, then run the suite locally with Node 22 or later. The signing tests use a disposable fixture key offline. The live verifier sends only read requests and checks to the public API.
curl -O https://hunchagents.xyz/guard-source.tar.gz
curl -O https://hunchagents.xyz/guard-release.json
shasum -a 256 guard-source.tar.gz
# Compare with sourceArchiveSha256 in guard-release.json.
mkdir hunch-guard && tar -xzf guard-source.tar.gz -C hunch-guard
cd hunch-guard
npm ci --ignore-scripts
npm test
node public/guard-verification.mjs https://hunchagents.xyzRelease manifest, key pin & validation results ↗ · Route policy & source links ↗ · Source archive ↓
A key fetched from this same website verifies consistency with Hunch’s published release; it does not independently establish the operator’s identity. Review and pin it outside the agent. Signatures establish provenance and integrity, not truth of the underlying provider data.
COVERAGE IS A CONTRACT
What this release establishes.
Within policy means this exact ETH → NVDA call met the published route checks at the observed state. It is not an asset safety rating, an issuer endorsement, an investment recommendation or a guarantee of future execution.
- The NVDA issuer retains mint, burn, freeze, pause and upgrade powers. This release observes relevant state but does not enumerate all role holders or remove those powers.
- Eleven runtime contracts are pinned; ten have matching Sourcify source evidence. The WETH proxy administrator has a runtime pin only.
- The exact wallet call is simulated. A second Multicall3 probe corroborates the NVDA recipient and WETH pool balance changes with a different router caller; it is not a full execution trace.
- Pool TWAP and price-impact checks do not establish fair ETH/USD value, redemption rights or trading eligibility. REST prices are references; no Chainlink feed or sequencer attestation is established.
- Latest-block evidence can be reorganized. State, price and account permissions can change between the final check and inclusion. No independent security audit has been completed.
Hunch is independent and is not affiliated with or endorsed by Robinhood, Uniswap, NVIDIA, Hookr or Pons. No official HUNCH token contract is published.