Non-custodial execution layer
Sign the intent. Mandate executes it.
You authorize a decision inside boundaries you set. Mandate simulates it, verifies every constraint, routes around MEV, settles on-chain, and proves the receipt — while your keys never leave your wallet.
Built for individuals, teams, and institutions moving serious capital on-chain
AI assistants are becoming a commodity. Execution is the moat.
Every wallet will ship a chat interface within a year. Almost none of them can safely move capital on your behalf. Deciding is cheap — executing a decision, simulated and constrained and protected and proven, is the hard, valuable, defensible part.
Mandate is not another copilot and not another tracker. It is the layer between a decision and the chain: the part that has to be right every single time, because it moves real money under real constraints.
One signed intent. Six deterministic stages.
Every action flows through the same path the object above just walked. Nothing skips a stage; a failed constraint stops the intent before it ever touches the chain.
Intentsigned
You express what you want and the boundaries it must respect. Mandate hashes the intent and your wallet signs it — an authorization, not a transfer.
EIP-712 · off-chainSimulateforked state
The intent is replayed against forked mainnet state across every candidate path. Outcomes, fees, and price impact are computed before a single wei moves.
~1,200 paths · 240msVerifyconstraints
Each simulated path is checked against your mandate — slippage caps, venue allowlists, position limits, exposure. Anything outside the boundary is rejected here.
deterministic · pass/failRouteMEV-protected
The best valid path is split across venues and submitted through private orderflow, so the execution can't be sandwiched or front-run.
private relay · no mempoolSettleon-chain
The routed bundle lands atomically. Partial fills are impossible — the whole intent settles inside its constraints or none of it does.
atomic bundle · 1 blockVerify receiptproven
The realized outcome is checked against the simulation and signed into a receipt you can verify independently. Proof, not a promise.
signed · verifiableCompose an intent. Watch it execute.
Set a target, define your boundaries, and run it. Mandate simulates, verifies every constraint, routes, settles, and returns a signed receipt — the same six stages, on demand.
Intent builder
Mandate never holds your keys. It only acts inside your boundaries.
Custody is not a policy you trust us to keep — it is a property of how the system is built. You sign an authorization scoped to a set of rules. Mandate can execute exactly that and nothing else.
Revoke any mandate on-chain at any time. No withdrawal, no cooperation, no waiting required.
Active mandate · #M-4471
Rebalance — ETH / BTC / USDC
Every execution leaves a receipt. Here they are, live.
Mandate's value is legible in the ledger. Settlements stream in as they land — each one simulated first, verified against its mandate, and routed through private orderflow.
You decide. You authorize. Mandate executes.
Access is opening to funds, market makers, treasuries, and protocol teams first. Tell us what you run — we'll route you in.