Stock Agents
Product documentation

How Pons moves and safeguards funds

The product combines an exportable account wallet, server-enforced mandate checks, verified onchain routing, receipt-derived accounting, and durable rebalance schedules on Robinhood Chain.

System model

One EOA holds the funds directly

Pons does not deploy or claim a separate vault for each agent. Agent holdings are audited attribution records over balances held by the shared account EOA.

Account custody
Exportable EOA with password-gated key recovery from encrypted server custody.
Implemented
Onchain execution
USDG swaps through verified Uniswap V3 contracts with live preflight checks.
Fail closed
Agent schedules
Durable Daily, Weekly, or Monthly allocation and rebalance workflows.
Durable
Wallet custody

Exportable ownership with a managed signer

You can import the same private key into MetaMask, while Pons can also decrypt and use it server-side for the agent transactions you authorize. Anyone with that key controls the wallet.

Create an exportable EOA

New accounts receive one real secp256k1 wallet on Robinhood Chain. The raw private key is shown after signup and must be backed up before the account continues.

Encrypted managed signing

Pons retains an AES-256-GCM encrypted copy bound to the user, wallet address, chain ID, and key version so durable agents can sign unattended transactions.

Wallet-address authentication

New users sign in with the EVM address and password. Existing accounts can keep legacy email sign-in and explicitly activate a new mainnet wallet.

Password-gated exits

Private-key export and external USDG withdrawal require fresh password confirmation. Pons provides no password-reset or email-recovery flow.

Acquisition eligibility

The technical geo gate applies to buys only

A residence attestation and Vercel request-country signal are evaluated server-side. Missing, invalid, expired, or restricted results place the account in wallet-only mode.

Wallet-only rights remain available
United States, Canada, United Kingdom, Switzerland, or unverifiable location data blocks new Stock Token acquisitions and buy-side rebalancing.
Wallet accessSell to USDGUSDG withdrawalPrivate-key exportEligibility review

This control is a technical product gate, not a representation of legal, regulatory, accreditation, sanctions, or KYC compliance.

Onchain execution

Quotes are previews; receipts are authoritative

Pons uses live routes and Chainlink values to decide whether a transaction is safe to attempt, then uses confirmed logs and balance deltas to update accounting.

  1. STEP 01
    Fund USDG and native gas

    USDG is the only allocation and withdrawal asset. Native ETH pays Robinhood Chain gas and is never presented as investment principal.

  2. STEP 02
    Quote verified V3 paths

    The server tries direct USDG routes and WETH-intermediate paths across supported fee tiers. WETH is routing infrastructure, not a user funding option.

  3. STEP 03
    Simulate and sign

    Chain preflight, contract metadata, fresh reference prices, quote sanity, slippage minimums, balance, attribution, native gas, and eligibility are checked before a local signature is produced.

  4. STEP 04
    Account from final receipts

    Holdings change only after a successful receipt and confirmed Transfer logs. Quoted output is never recorded as though it were received.

Durable automation

The schedule survives process restarts

A workflow receives only the agent ID and schedule version. Database, cryptography, RPC, and signing work stays inside retryable server steps.

Cycle behavior
Each active cycle is deterministic around its approved mandate.
Daily · Weekly · Monthly
  • Refresh onchain balances and valid reference prices.
  • Pause when ownership, eligibility, route, gas, or attribution checks fail.
  • Sell overweight positions before buying underweight positions.
  • Record exact token and USDG receipt amounts under stable idempotency keys.
  • Sleep durably until the next cadence, or stop when paused, closed, or superseded.
Safety boundaries

A failed invariant prevents signing

These checks are authorization and accounting boundaries, not decorative dashboard states. Browser controls never replace server enforcement.

Fixed asset allowlist

Only the 18 published Stock Token contracts can enter a new mandate. A symbol in copy or research cannot add itself to execution.

Fresh price requirement

Chainlink rounds must be positive, complete, and within the configured freshness window. Stale or unavailable feeds fail closed.

Sane route requirement

A quote must exist and remain within a bounded deviation from the live reference value before its calldata can be used.

Serialized wallet writes

A per-wallet execution lease, persisted nonce, expected hash, and encrypted signed payload prevent concurrent writes and unsafe blind rebroadcasts.

Attribution reconciliation

If externally moved tokens leave onchain balances below agent-attributed holdings, affected automation pauses instead of inventing a balance.

Independent workflow authorization

Durable steps recheck agent, user, and wallet ownership instead of trusting the browser session that originally started a schedule.

Network and assets

Robinhood Chain mainnet configuration

Public identifiers are fixed in the application catalog and independently checked against live contract metadata before writes are enabled.

Settlement details
Do not send funds on another network.
Chain ID
4663
Settlement token
USDG · 6 decimals
USDG contract
0x5fc5360D0400a0Fd4f2af552ADD042D716F1d168
Gas token
Native ETH

Supported Stock Token symbols

NVDAMSFTGOOGLAAPLAMZNMETATSLAAMDINTCMUCOINCRCLPLTRMSTRGMESPYQQQSGOV

WETH may appear inside a selected route but is not accepted as agent principal.

Open Blockscout
Create wallet accountView implementation roadmap