Verifiable Liquidity Mandates
Delegate liquidity operations without delegating blind trust.
Capital owners define the markets, limits and authority. Agents execute. COSMO proves every action. Built for capital entrusted by protocols, foundations, DAOs, treasuries and investors — where a wallet key with blanket authority was never an acceptable answer.
Delegation today means handing over too much.
A capital owner who wants liquidity work done has had five bad options. A mandate replaces all five.
An unrestricted private key
Whoever holds the key can do everything the key can do. Possession is not a mandate.
Signing every transaction by hand
Manual co-signing does not scale to liquidity work and re-centralizes exactly what was delegated.
Trusting the operator’s own reports
Reporting is produced by the party being measured. It is an account, not a proof.
Learning about breaches after the loss
Limits that are only checked in hindsight are not limits. They are forensics.
Reassembling the story from three systems
Authorization, execution and settlement live in different tools — and disagree exactly when it matters.
Delegation without blanket authority.
Autonomy without free disposal.
Proof instead of reporting.
One mandate binds the whole engagement.
Not a policy PDF and a spreadsheet — one signed object the execution engine enforces and a verifier can re-check.
Six stages, fail-closed at every one.
Other systems can limit what an agent may spend. A mandate additionally proves what applied, what ran, and what settled.
Mandate
The capital owner’s terms become one signed, one-shot mandate: venue, amount, limits, expiry. No mandate, no action.
Policy
Rules are hash-pinned before anything runs. Default-REJECT: a venue drift, a moved code hash or a breached cap ends the case, fail-closed.
Ceremony
The engine stops at AWAITING_ARM. A human arms the irreversible step — case-bound, fresh, exactly once. Autonomy ends where capital moves.
Execution
Fresh quote, simulation and gas check against the mandated bounds — then exactly one submit. No automatic retry.
Settlement
The case watches the chain until the transaction is canonical with the mandated confirmations, and validates what settled against what was signed.
Receipt & verification
A signed receipt closes the case over hash-chained evidence. An independent standalone verifier re-checks the whole case from the files alone.
A real mandate has already run on Ethereum mainnet.
EVM-MICRO-001: real capital, a hard-pinned pool and router, bounded amount, slippage and gas caps, a human-armed irreversible step, exactly one submit — and settlement both an internal and an independent standalone verifier ACCEPT.
- Block
- 25,796,272
- Received
- 1,155.33 SUPRA
- Submit attempts
- 1 — no automatic retry
- Verification
- internal + standalone ACCEPT
- Block
- 25,796,695
- Received
- 1,154.71 SUPRA
- Submit attempts
- 1 — no automatic retry
- Verification
- internal + standalone ACCEPT
Honest scope: this proves the mandate mechanics end-to-end on a bounded pilot. It is not a production-ready market-making system and not a best-execution product — no reference-market comparison data exists yet. Further live execution requires a new explicit operator decision.
COSMO Controlled Liquidity Pilot
Deliberately small, deliberately concrete: run one bounded liquidity mandate with real capital and independently verify the result.
The pilot is curated: one engagement at a time, scoped together with the capital owner before any mandate is signed.
What COSMO is not.
A mandate layer earns trust by stating its edges as plainly as its claims.
- Not the market maker, and not a trading strategy
- Not a DEX, and not a custodian
- Not merely an agent wallet
- Not a profitability promise
- Not a general trading bot
- No guaranteed capital safety, no regulatory or legal compliance claim
- No best-execution claim while no reference-market comparison data exists
- Not production-ready market making — the proof below is a bounded pilot