Fault-tolerant onchain execution for autonomous agents through bounded Saga compensation.
Open the live TALOS E-017 interface · Inspect the onchain proof · View the KeeperHub recovery transaction
TALOS sits around KeeperHub-executed multi-step financial intents. When one leg succeeds and another fails, it does not pretend the operation was atomic or hide the failure behind a generic status. It reconciles the financial effect, measures the unresolved settlement value as an STN Delta, and selects the precommitted recovery route from the Recovery Covenant.
STN recovers what did not settle. LTN corrects what settled but should no longer remain exposed.
This rebuild implements the STN proof path locally and has bounded disposable Base Sepolia KeeperHub direct-execution and disabled-workflow recovery proofs, plus read-only live quote adapters. It does not claim venue fills, production custody, or cross-venue settlement.
The vault's local proof now requires exact ERC-20 balance deltas, commits
settlement/forward/fee destinations before dispatch, records bounded forward
effects with evidence commitments, and distinguishes ROLLED_BACK, RECOVERED,
and CONTAINED. These controls have local adversarial regression evidence but
are not an independent audit or production assurance.
Canonical proof: E-017 · Base Sepolia (84532) · KeeperHub workflow
8nbhy1mwhm2rukz2g566w · execution zo996sfnyab3wjwp63wuf · terminal state
RECOVERED.
| Deployment | Address | Deployment transaction |
|---|---|---|
TalosSagaVault.sol |
0xF161e01Ff698b0ACF5A0471E0b058dF047E46294 |
0x1d6931…545d49 |
TestUsdc.sol — mock six-decimal ERC-20 |
0x6a6097Ef738C67373310Cc3EEBd867B9423750a3 |
0xf8e2ff…474568 |
| E-017 KeeperHub write | Base Sepolia transaction | Evidence |
|---|---|---|
| Commit Covenant and initiate Saga | 0xe679cd…dbfa99 |
KeeperHub log + successful onchain receipt |
| Dispatch Saga | 0x2bea65…5b96d5 |
KeeperHub log + successful onchain receipt |
| Record forward effect | 0x08abb1…21765 |
KeeperHub status-level receipt + successful onchain receipt |
| Recover STN Delta through committed route | 0xd80de3…59729d |
KeeperHub log + successful onchain receipt + terminal post-state |
The reconciled accounting is
300000000 = 180000000 forward + 600000 fees + 119400000 returned, with
remainingAmount = 0. See the judge-facing onchain proof
and canonical E-017 evidence
for the Saga ID, Covenant ID, provenance, and explicit limitations. The token is
a disposable test fixture, not production USDC.
contracts/ TalosSagaVault.sol and Foundry test target
packages/talos-core/ Covenant, Saga, Delta, evidence, route primitives
packages/talos-sdk/ One-call typed client and preflight validation
packages/pulse-arb/ Deterministic quote scanner, live quote collector, and bounded intent builder
packages/venue-adapters/ Kalshi, Polymarket, and Uniswap V3 quote/order boundaries
agent/ Saga coordinator, ledger, KeeperHub adapter boundary
mcp/ JSON-RPC tool surface for `talos_execute_saga_intent`
frontend/ Zero-build E-017 recovery story and onchain evidence interface
project-state/ Product Foundry canonical truth and evidence registers
docs/ Integration and runbook material
pnpm install
pnpm test
pnpm build
pnpm proof:stn
pnpm pulsearb:scan
pnpm local:proof
pnpm frontend:check
pnpm verify:keeperhub # read-only; requires host-managed KEEPERHUB_API_KEYRun the read-only live venue smoke check (set the DEX variables shown in
docs/venue-adapters.md):
pnpm venues:checkRun the local MCP server:
pnpm mcpThe KeeperHub credential is intentionally not committed. A host with a
KeeperHub MCP connection may provide KEEPERHUB_API_KEY; the adapter reports
only status and never prints the secret.
For the current MCP boundary, use KEEPERHUB_MCP_URL=https://app.keeperhub.com/mcp
and run pnpm --filter @talos/agent keeperhub:schemas for a read-only action
registry probe. The verified private, disabled fallback workflow is
8nbhy1mwhm2rukz2g566w; it uses an injected dependent-leg status because the
KeeperHub HTTP Request action is Pro-gated. Live HTTP venue execution still
requires a separately reviewed workflow, signer/relayer role, and write gate.
| Verified locally | Not yet verified |
|---|---|
| STN accounting, Covenant route checks, disposable testnet recovery, and one disabled KeeperHub workflow execution | Live HTTP venue workflow, production custody, and reusable deployment |
| SDK validation and idempotency | Production custody and reusable deployment |
| MCP JSON-RPC schema and workflow validation | Venue order settlement and HTTP-action workflow writes |
| Kalshi, Polymarket, and Base Uniswap quote reads | Venue writes, fills, and independent settlement evidence |
| E-017 Mission Control, Saga, and Receipt views with exact recorded IDs, receipt provenance, and accounting | Live browser-triggered KeeperHub writes and LTN market-aware recovery |
PulseArb can now consume live normalized quote reads through the venue-adapter package. It still requires an explicit cross-venue market mapping, and it does not claim executable or risk-free arbitrage until orders fill and independent venue/balance evidence is reconciled through KeeperHub.
Project Truth and implementation status live under project-state/.