Portable scope certificate

Proof of containment, not a promise

Every marketplace in this category claims that out-of-scope calls are blocked. This page emits a self-contained certificate you can re-derive from chain state yourself — with cast or viem, no GuardRail server involved. The commitment below is a keccak256 over exactly the fields that define the agent's authority.

listing #1 listing #2 listing #3 listing #4

Verdict

CONTAINED — the agent's authority is real, live, and bounded as declared

SubjectGuardRail GridBot (listing #2)

CategoryGrid Trading

Agent wallet0xa847F3BB…0dB5be97

Session key0x48b989ff…1dcff53c

Pinned block121331189

Issued2026-09-11T21:07:44.000Z

Declared authority

Allowlist size: 2 contract(s)
Cap: 0.02 BNB / 24h
Marketplace says live: true
KeyStore says live: true
Independent sources agree: true
trustScore: 100/100

allowlist: 0x10ED43…56024E, 0xbb4CdB…bc095c

Commitment

0x34a9fff7d0f0286bd927e0984edc2f034151f6067554a849501343a1eaa519c3

Anyone can reproduce this certificate from chain state alone — no GuardRail server involved.

1. Read scopeAudit(2) and listingSummary(2) from 0xb7c80f5154952E48f6E1548282343000c45b80d6 at block 121331189 on chain 56.
2. Read isValidKey(agentWallet, sessionKeyId) from the Altana KeyStore 0x6572427ED530BadcF7375Cf9A4709D8d2b0E7E0a at the SAME block.
3. keccak256(abi.encode(marketplace, listingId, agentWallet, sessionKeyId, capToken, capLimit, capPeriod, sortedAllowlist)) — compare to scopeCommitment.
4. If the hash matches and both sources agree, the containment claim is verified by construction, not by assertion.

Reproduce it yourself

# 1. read the scope at the pinned block (archive-capable RPC for old heights)
cast call 0xb7c80f5154952E48f6E1548282343000c45b80d6 \
  "scopeAudit(uint256)(address,bytes32,address,uint256,uint256,address[],bool,bool)" \
  2 --block 121331189 --rpc-url <RPC>

# 2. ask the KeyStore independently
cast call 0x6572427ED530BadcF7375Cf9A4709D8d2b0E7E0a "isValidKey(address,bytes32)(bool)" \
  0xa847F3BBF69e8A888b59BC8729ce787E0dB5be97 0x48b989ffa9f66f03dd8e20b7c0b6a55931265c50a1eabde1fb21f3c21dcff53c --rpc-url <RPC>

# 3. recompute the commitment (fields sorted by contract address)
cast keccak $(cast abi-encode \
  "f(address,uint256,address,bytes32,address,uint256,uint256,address[])" \
  0xb7c80f5154952E48f6E1548282343000c45b80d6 2 \
  0xa847F3BBF69e8A888b59BC8729ce787E0dB5be97 0x48b989ffa9f66f03dd8e20b7c0b6a55931265c50a1eabde1fb21f3c21dcff53c \
  0x0000000000000000000000000000000000000000 20000000000000000 \
  86400 \
  "[0x10ED43C718714eb63d5aA57B78B54704E256024E,0xbb4CdB9CBd36B01bD1cBaEBF2De08d9173bc095c]")

# → must equal 0x34a9fff7d0f0286bd927e0984edc2f034151f6067554a849501343a1eaa519c3

# 4. machine-readable form
curl "https://guardrail-delta.vercel.app/api/scope-certificate?listingId=2"

Re-read at the exact pinnedBlock with an archive-capable RPC. Public BSC RPCs prune old state (they answer `missing trie node` for historical eth_call), which is why the certificate defaults to the latest block; the blockHash is included so the height is unambiguous.

The certificate is derived, not asserted. If the session is revoked, the listing paused, or the declared scope changes, the verdict and the commitment both change — and a third party recomputing from the same block will see the same result.