Let an agent manage liquidity without giving it unlimited control.
You set the rules first: which market, how much, which actions, until when. The agent can act only inside them, and every action leaves a record that can be checked.
- Your wallet
- Rules
- Agent acts
- Proof
Tested with real funds at small scale. No run is active now, and a new one needs a new decision by us. No promise of profit or of safe funds is made. The technical name is Verifiable Liquidity Mandates.
What the agent may do is fixed before it does anything.
Not a document next to the software: one signed set of rules (mandate) that the software enforces and a checking program can re-check.
The rules you set
- How much
- EUR 40 in total, EUR 20 per side
- Which actions
- open once · collect fees once at most · close once · reset approvals
- Until when
- 5 Sep 2026
- Who owns the position
- the owner of the funds, never the agent
The rules shown are the real ones from the test run VLM-001 on Ethereum mainnet.
What a set of rules can fix
Until now, letting someone else act meant one of five bad options.
An owner of funds who wants liquidity work done had to pick one of these. Rules replace all five.
Hand over the key
Whoever holds the key can do everything the key can do. Holding a key says nothing about what you are allowed to do.
Sign every step by hand
That does not keep up with liquidity work, and it puts the owner back in the middle of everything.
Trust the reports
Reports are written by the party being measured. They are an account, not a proof.
Find out after the loss
A limit that is only checked afterwards is not a limit.
Piece it together from three systems
Permission, action and outcome live in different tools, and they disagree exactly when it matters.
Let someone act without handing over everything.
Let a program run without letting it do as it likes.
Proof instead of reports.
Six stages. At each one, a failed check stops the run.
Other systems can limit what an agent may spend. Here there is also a record of which rules applied, what ran and how it ended.
Rules
The owner’s terms become one signed set of rules: place, amount, limits, end date. No rules, no action.
Checks fixed in advance
What will be checked is fixed before anything runs. If the trading place changed, its code changed or a limit would be broken, the run stops.
A person releases the step that cannot be undone
The program stops and waits. A person releases the one step that moves funds: for this run only, and exactly once.
Action
A fresh price, a dry run and a fee check against the limits, then exactly one transaction. No automatic retry.
Completion
The run watches the chain until the transaction is final, and compares what happened with what was signed.
Record and check
A signed record closes the run. A separate checking program, which anyone can download, re-checks the whole run from the files alone.
Technical details: the six stages by their canonical names
- 01 Mandate. One signed, one-shot mandate: venue, amount, limits, expiry.
- 02 Policy. Rules are hash-pinned before anything runs. Default-REJECT: a venue drift, a moved code hash or a breached cap ends the case, fail-closed.
- 03 Ceremony. The engine stops at AWAITING_ARM. A human arms the irreversible step: case-bound, fresh, exactly once.
- 04 Execution. Fresh quote, simulation and gas check against the mandated bounds, then exactly one submit.
- 05 Settlement. The case watches the chain until the transaction is canonical with the mandated confirmations, and validates what settled against what was signed.
- 06 Receipt and verification. A signed receipt closes the case over hash-chained evidence. The published standalone verifier re-checks the whole case from the files alone; it checks internal consistency and is written by COSMO, not by a third party.
It was tested with real funds on Ethereum mainnet.
Two runs so far. Both are over. Their transactions are public.
VLM-001: a full run, from start to end
ended · checked twiceA liquidity position was opened directly in the owner's wallet, approvals were reset, and the position was closed with the proceeds paid straight back to the owner. The program's wallet sent four transactions in its whole life. After the end date, the permission was shown to have ended and the signing key was retired.
The opening, the reset and the closing each passed all 10 checks of two checking programs, one of them published for anyone to run.
EVM-MICRO-001: two single trades under rules
Real funds, a fixed trading place, a capped amount and fee, a person releasing the step that cannot be undone, and exactly one transaction each.
- Block
- 25,796,272
- Received
- 1,155.33 SUPRA
- Attempts
- 1, no automatic retry
- Check
- accepted by both checking programs
- Block
- 25,796,695
- Received
- 1,154.71 SUPRA
- Attempts
- 1, no automatic retry
- Check
- accepted by both checking programs
Honest limit: these runs show that the mechanics work from start to end at small scale. They are not a market making system ready for production and say nothing about the best possible price: no comparison data exists yet. The evidence files of EVM-MICRO-001 are not published; its two transactions are. Another live run needs a new decision by us.
A small, concrete pilot.
Run one set of rules with real funds and a fixed budget, and check the result yourself.
We take one engagement at a time and agree its scope with the owner of the funds before any rules are signed.
What COSMO is not.
The edges, stated as plainly as the claims.
- Not the market maker, and not a trading strategy
- Not an exchange, and not a custodian of your funds
- Not just a wallet for an agent
- No promise of profit
- Not a general trading bot
- No promise that funds are safe, and no claim of legal or regulatory compliance
- No claim of the best possible price, as long as no comparison data exists
- Not ready for production market making: the proof below is a small, limited test