AI agents can now send money on their own. One poisoned prompt can swap the payee for a drainer. Tripwire asks an on-chain scam registry first and answers ALLOW, WARN or BLOCK, with reasons.
An on-chain list of flagged accounts. Anyone calls get_risk; trusted reporters file flags with a reason and evidence.
Reads the registry over public RPC, adds lookalike-name and "account doesn't exist" checks, returns a verdict. Can't reach the registry? It warns, never silently allows.
An agent's wallet that can only request spends. It enforces caps and asks the registry on chain: paid, blocked, or held for the owner. Failed transfers are refunded.
NEAR AI Cloud reads the payment's purpose. It can only raise ALLOW to WARN, never unblock anything.
| Registry | tripwire-registry-44ea74.testnet |
| Guard vault | tripwire-vault-44ea74.testnet |
| Reporter | tripwire-reporter-44ea74.testnet |
| Source | github.com/Afar88/tripwire |