ATF
Agent Transaction Firewall
Policy-enforced guardrails for AI agent transactions. Deterministic receipts, permit-based authorization, and cryptographic verification. Built for Solana — swaps, lending, and perps.
Infrastructure for the Agent Economy
ProvenGraph helps an agent determine what to trust. TruCore ATF determines what that agent is authorized to do. Together they provide a trust and control layer between AI reasoning and real-world execution.
Every TruCore product is open source, MIT-licensed, and built for developers who want their agents to transact and discover without human intervention.
Built for agent developers, protocol teams, and AI infrastructure builders.
Products
Every product is MIT-licensed. Self-host for free, or use our managed cloud when you need scale.
Featured Product
Deterministic policy enforcement for AI agent transactions. Every decision produces a cryptographic receipt. Built for Solana trading bots and autonomous agents.
Every decision is enforced before execution. Every result produces a cryptographic receipt. You can verify it independently.
Live API enforcement on Solana. Every policy decision creates a verifiable receipt. Status reflects real system state.
Last updated: 2026-08-31
Golden Path
From first trade to verified receipt. No manual config needed.
Open your terminal and install the CLI globally:
npm install -g @trucore/atf@1.5.1
The demo runs each atf command live. Run them yourself in your terminal. No project setup required.
Each command produces operator-friendly terminal output and bot-ready JSON with machine_summary, suggested_action, and suggested_command fields.
Enforcement Model
Max SOL or token spend per tx and per window.
Jupiter, Orca, and Raydium (swaps). Solend, Marginfi, and Kamino (lending). Perps venues feature-gated, off by default.
Hard max slippage and minimum-out checks.
Permits expire fast and cannot be replayed.
Activation
You can test ATF safely before using real funds.
No setup required for demo. No risk to try.
Step 1: Run a sample transaction using demo or dry-run.
Step 2: Review the decision and receipt to understand policy and output.
Step 3: Run your own protected trade with real or controlled input.
You stay in control. You can start in safe mode with no real execution.
How It Works
Every trade follows the same enforced path: policy evaluated, decision made, receipt generated, result verified.
AI Agent
submits tx intent with policy permit
Policy Gate
Intelligent Probe
risk scan · PIL
Execute
on-chain settlement
Receipt
sealing…
▸ Agent submits transaction intent
Intelligence
The Policy Intelligence Layer (PIL) transforms ATF from a transaction firewall into an intelligence system, turning every execution into signal, and every signal into better decisions.
A new primitive: systems that learn from execution without sacrificing determinism or control.
Every policy decision is recorded with full context. Receipts become queryable signal for operators.
Aggregated execution data surfaces patterns, enabling operator-gated policy refinements grounded in real behavior.
Operators review and approve every policy change. The system suggests, humans decide. Deterministic and auditable at every step.
ATF enforces policy, applies execution guardrails, and verifies outcomes outside the bot's token budget. That means less wasted compute on repetitive control logic, fewer invalid transaction loops, and more model capacity for higher-value intelligence.
Most systems execute transactions. TruCore systems learn from them.
Ecosystem
ATF connects to the venues where autonomous agents operate, enforcing policy before every transaction reaches the chain.
DEX
Lending
Perps
ATF enforces execution policies across decentralized exchanges, lending markets, and perpetual venues where autonomous agents operate.
Production Readiness
Deterministic policy enforcement infrastructure for autonomous agents operating across Solana venues.
Scope
V1 is intentionally focused. Production-grade enforcement across a well-defined surface area, with real adapters for every supported venue and chain. Expansion happens only after each layer is proven.
ATF is enforcement infrastructure, not just a CLI. Start with the golden path, then unlock advanced capabilities.
Resources & Documentation
Everything you need to evaluate and integrate ATF.
Get Started
Start free. Get receipts for every decision. Upgrade when your bot needs higher caps or real execution.
Autonomous finance is entering a phase where execution is real, adversaries are active, and risk surfaces compound quickly. The window to add hard enforcement, and intelligence that learns from it, is now.
Agent-driven finance has moved from experiments to production workflows. Capital is now being deployed by autonomous systems in live environments.
Execution happens in an adversarial arena where value extraction is automated. Any unbounded behavior is quickly priced and exploited.
Human trust checks cannot keep pace with machine-speed decisions. Deterministic enforcement is how systems stay reliable as volume rises.
Protecting transactions is necessary but insufficient. Systems that learn from execution history, under operator control, make better decisions over time without sacrificing determinism.
The same input consistently produces the same policy decision and receipt hash.
Request JSON
{
"action": "swap",
"token_in": "SOL",
"token_out": "USDC",
"amount": 10,
"max_slippage_bps": 100,
"ttl_seconds": 60
}Result JSON
{
"status": "allowed",
"reason": "Request satisfies demo policy limits.",
"invariant_checks": [
"amount <= 1000: pass",
"max_slippage_bps <= 300: pass",
"ttl_seconds <= 300: pass"
],
"receipt_hash": "9d9e34f2df6dd5ecf0988cb3af0ea4ab60431b64d7d5e3b35d0972ce4e4c986f"
}A phased approach. Each stage builds on proven enforcement before expanding scope.
Phase 1
Policy engine, permit gateway, execution validator, and receipt ledger for Solana. Jupiter, Orca, Raydium (swaps), Solend, Marginfi, Kamino (lending), and feature-gated perps integrations. Comprehensive CLI, API, agent tooling, example projects, and deployable services.
Phase 2
Publish policy evaluations and execution receipts to an on-chain registry for transparent, verifiable audit. Solana programs deployed to devnet.
Phase 3
On-chain program enforcing portfolio-level hard invariants with vault-scoped custody and automatic halt logic.
Phase 4
Hyperliquid enforcement is feature-gated today. Base support is coming soon. Additional chains and protocol integrations follow as each layer is proven.
Get early-access updates, release notes, and security advisories.
For teams already building
Working with a limited cohort of early teams integrating ATF into production trading bots on Solana. This is not a waitlist - it is hands-on integration support.
Includes:
Deterministic policy evaluation
Cryptographic receipt hashing
Public demo policy transparency
Structured release discipline