Portable scope certificate

Proof of containment, not a promise

Every marketplace in this category claims that out-of-scope calls are blocked. This page emits a self-contained certificate you can re-derive from chain state yourself — with cast or viem, no GuardRail server involved. The commitment below is a keccak256 over exactly the fields that define the agent's authority.

listing #1 listing #2 listing #3 listing #4

Verdict

CONTAINED — the agent's authority is real, live, and bounded as declared

SubjectGuardRail Yield Router (listing #3)

CategoryYield Optimisation

Agent wallet0xa847F3BB…0dB5be97

Session key0xaf160dfb…7197a92d

Pinned block121331194

Issued2026-09-11T21:07:46.000Z

Declared authority

Allowlist size: 2 contract(s)
Cap: 0.02 BNB / 24h
Marketplace says live: true
KeyStore says live: true
Independent sources agree: true
trustScore: 100/100

allowlist: 0x10ED43…56024E, 0xbb4CdB…bc095c

Commitment

0xceb95debc7f9999b61864f4b6fd85d47a52a7a9944062a25bd422cda347d0c7f

Anyone can reproduce this certificate from chain state alone — no GuardRail server involved.

1. Read scopeAudit(3) and listingSummary(3) from 0xb7c80f5154952E48f6E1548282343000c45b80d6 at block 121331194 on chain 56.
2. Read isValidKey(agentWallet, sessionKeyId) from the Altana KeyStore 0x6572427ED530BadcF7375Cf9A4709D8d2b0E7E0a at the SAME block.
3. keccak256(abi.encode(marketplace, listingId, agentWallet, sessionKeyId, capToken, capLimit, capPeriod, sortedAllowlist)) — compare to scopeCommitment.
4. If the hash matches and both sources agree, the containment claim is verified by construction, not by assertion.

Reproduce it yourself

# 1. read the scope at the pinned block (archive-capable RPC for old heights)
cast call 0xb7c80f5154952E48f6E1548282343000c45b80d6 \
  "scopeAudit(uint256)(address,bytes32,address,uint256,uint256,address[],bool,bool)" \
  3 --block 121331194 --rpc-url <RPC>

# 2. ask the KeyStore independently
cast call 0x6572427ED530BadcF7375Cf9A4709D8d2b0E7E0a "isValidKey(address,bytes32)(bool)" \
  0xa847F3BBF69e8A888b59BC8729ce787E0dB5be97 0xaf160dfb86614753b26ae3835c1f867e1d7baf6c35c5316e7aefd04e7197a92d --rpc-url <RPC>

# 3. recompute the commitment (fields sorted by contract address)
cast keccak $(cast abi-encode \
  "f(address,uint256,address,bytes32,address,uint256,uint256,address[])" \
  0xb7c80f5154952E48f6E1548282343000c45b80d6 3 \
  0xa847F3BBF69e8A888b59BC8729ce787E0dB5be97 0xaf160dfb86614753b26ae3835c1f867e1d7baf6c35c5316e7aefd04e7197a92d \
  0x0000000000000000000000000000000000000000 20000000000000000 \
  86400 \
  "[0x10ED43C718714eb63d5aA57B78B54704E256024E,0xbb4CdB9CBd36B01bD1cBaEBF2De08d9173bc095c]")

# → must equal 0xceb95debc7f9999b61864f4b6fd85d47a52a7a9944062a25bd422cda347d0c7f

# 4. machine-readable form
curl "https://guardrail-delta.vercel.app/api/scope-certificate?listingId=3"

Re-read at the exact pinnedBlock with an archive-capable RPC. Public BSC RPCs prune old state (they answer `missing trie node` for historical eth_call), which is why the certificate defaults to the latest block; the blockHash is included so the height is unambiguous.

The certificate is derived, not asserted. If the session is revoked, the listing paused, or the declared scope changes, the verdict and the commitment both change — and a third party recomputing from the same block will see the same result.