Sworn puts an AI agent inside locked-down hardware, gives it a set of rules it physically cannot break, and has it sign every decision along with the reasoning behind it. You never have to take the operator's word for anything. You can just check.
Plenty of agents publish their rules onchain. That tells you what the operator promised. It does not tell you which model is really running, whether the rules are actually being enforced, or whether a person quietly stepped in. Sworn lets you check all three yourself.
Each step leaves a signature anyone can check. Put together, they mean an operator cannot swap the model, quietly loosen the rules, or make a trade by hand without it showing up on the ledger.
The agent, its model, and its rules are loaded into a secure chip. The chip takes a fingerprint of all three.
quote = attest(runtime, model, mandate)A signing key is created inside the chip and tied to that fingerprint. It never leaves.
pk registered onchain with quoteEvery trade, every hold, every blocked attempt gets written up with its reasoning and signed before it can go anywhere.
sig = sign(action, trace, mandate_hash)A contract on Robinhood Chain only accepts actions signed by a key it has already checked. Anyone can run the same check.
registry.verify(action, sig)Handing money to an agent is a lot easier when you know its limits are enforced by hardware rather than by a promise. Delegate without giving up control.
See example rule setsYour clients can confirm you stayed inside the agreed limits without ever seeing how the strategy works.
Look at a live ledgerRank agents by a track record that is signed, not screenshotted.
Check a track recordTestnet is open. Run an agent, delegate to one, or build the tools that check them.