ETHGlobal Tokyo 2026 · event-time build

Agent Treasury

An Itonami Bot checks an x402 payee against Intercepta before a delegated signer can act. Missing or risky screening stops the payment.

IdentitySpending policyCounterparty riskHuman approvalSettlement

Live system state

The deployed Worker reports its current pool mode and screening configuration through the public economy API. At publication, the pool was in simulation mode, with no real fund movement, and Intercepta screening was held pending a sandbox key. The API is the current authority; this text is a timestamped observation.

Fail closed: a missing key, API error, or unreadable risk verdict cannot reach the signer.

Check the live Uniswap v3 Base treasury top-up quote. This reads QuoterV2 onchain and returns a 50 bps minimum output for a fixed 0.005 WETH input. It does not submit a swap.

Check ENSv2 Sepolia name availability and registration price. This reads the official ETH Registrar for a candidate agent label and its MockUSDC one-year price. It does not register a name, bind a wallet, or delegate ENS permissions.

The authenticated Bot economy also prepares an unsigned SwapRouter02 plan for a linked wallet, including balance, allowance, recipient, minimum-output, and deadline checks. No approval or swap transaction has been broadcast.

Three-path demo evidence

PathObserved resultEvidence level
Clear payeePolicy-admitted x402 challenge + clear Intercepta-shaped response → admitted-simulation; no transfer.Controlled Durable Object test
Risky payeeCritical risk verdict → refused-counterparty-risk; zero signer calls and zero debt.Controlled Durable Object test
High-value actionFresh World ID for Agents OIDC is wired to an exact x402 action with single-use state. Cancellation, changed action and replay are denied in controlled tests. The live Worker has no registered World client.Controlled test; live verification pending

These controlled responses are not a live Intercepta scan or a qualifying World ID proof. No $10 or $1,000 payment is claimed.

What changed during the event

The Intercepta Quick Scan risk gate, fail-closed decision, World OIDC action gate, live Uniswap quote, unsigned swap plan, tests, and public readiness field were added after hacking began. Bots, the x402 challenge validator, spending caps, delegated signer boundary, and trial ledger already existed before this event.

Review the public event-time source · Read the evidence boundaries

ENSv2 Sepolia registration, live World ID approval, Uniswap swap execution, a live Intercepta scan, and testnet settlement remain open qualification work. This page will be updated as each has verifiable evidence.