ARI::BOOT / CHAIN_4663
ARI
LOADING CAPITAL CONTROL000
AUTONOMOUS TRADING / ROBINHOOD CHAIN

AUTONOMY WITHOUT custody.

Give agents agency.
Never give them the keys.

ENTER
THE MACHINE
0001
CONTROL IS THE PRODUCT
01THE THESIS
MOST “AGENT FRAMEWORKS” GIVE A MODEL
AN RPC CLIENT AND CALL IT AUTONOMY.

THAT’S NOT
AN AGENT.

IT’S AN UNBOUNDED
LIABILITY.

ARI OS treats the model as what it is: an untrusted planner. The operating system owns identity, policy, simulation, risk, approval, custody, execution and recovery.

02 / CUSTODY BOUNDARYNO DIRECT KEY ACCESSNO DIRECT KEY ACCESS
THE NON-NEGOTIABLE

THE AI
NEVER
TOUCHES
THE KEY.

ISOLATED SIGNER / 0600

The encrypted keystore lives in a separate process. Every transaction is independently decoded, policy-checked, nonce-checked and replay-fenced before a signature exists.

AUTHORIZATION IDENTITY MATCHED
03WHAT THE MODEL CAN’T CROSS

THE MODEL IS
NOT THE SYSTEM.

UNTRUSTED / PROBABILISTIC
MODELintent only
CAPABILITY BOUNDARY
HOST / DETERMINISTIC
01POLICY
02SIMULATE
03RISK
04APPROVE
05AUTHORIZE
06SIGN

The agent gets typed tools. Not a wallet. Not arbitrary calldata. Not a signing endpoint.

FAIL CLOSED / ALWAYS
04THE EXECUTION GAUNTLET

ONE TRADE.
SIX TRIALS.

0106
01 / INTENTTHE AGENT
ASKS.

Typed side. Known asset. Bounded amount. No arbitrary target.

ASK
02 / QUOTETHE ROUTE
IS PINNED.

Deterministic Uniswap V3 discovery at a known block.

PIN
03 / SIMULATIONTHE BYTES
ARE TESTED.

The exact serialized transaction is simulated. Not an approximation.

RUN
04 / RISKCAPITAL
GETS A VOTE.

Atomic reservations. Native-unit caps. Denomination-safe exposure.

CAP
05 / APPROVALA HUMAN
DECIDES.

Authenticated proof binds one operator to one exact transaction.

YES
06 / SIGNTHE VAULT
MOVES.

One-time envelope. Independent policy. Durable broadcast record.

GO
05EXECUTABLE TRUTH

DON’T TRUST
THE WEBSITE.

TRUST THE BUILD.

●ari-os / verificationNODE 22

$ git clone github.com/venymlabs/ari-os

$ npm ci && npm run verify

building isolated signer...

testing crash recovery...

testing atomic reservations...

✓ 54 files   ✓ 392 tests   ✓ typecheck

✓ mainnet bytecode   ✓ testnet bytecode

✓ 0 production vulnerabilities

$ raos trade quote --side buy █

OPEN THE
PRODUCTION RUNBOOK↗
06 / DURABLE BY DESIGN

CRASHES
HAPPEN.

CAPITAL
REMEMBERS.

Lost response. Restart. Reorg. ARI resumes from durable truth—never from a hopeful retry.

SIGNING→BROADCAST→FINALITY
07 / RECEIPTS
000TESTS
PASSING
3/3LIVE CHAIN
CHECKS
0KNOWN PROD
VULNERABILITIES
MITOPEN
FOREVER

NOT A PROMPT WRAPPER.

A CAPITAL
CONTROL PLANE.

ISOLATED SIGNER — EXACT TRANSACTIONS — ATOMIC RISK — AUTHENTICATED APPROVAL — LOST-RESPONSE RECOVERY — 
ISOLATED SIGNER — EXACT TRANSACTIONS — ATOMIC RISK — AUTHENTICATED APPROVAL — LOST-RESPONSE RECOVERY — 
AUTONOMY WITHOUT CUSTODYARI / CHAIN 4663
ARI
OPERATING SYSTEM
THE AGENT
CAN ASK.THE SYSTEM
DECIDES.

Open infrastructure for agents that execute without ever possessing the keys.

08 / YOUR MOVE

BUILD AN AGENT
WORTHY OF CAPITAL.

ARI OS is public. The custody boundary is not negotiable.

CLONE
ARI OS↗