GUARDIAN_PROTECTED

Your agents act.
Your Guardian
never sleeps.

> An agent needs a wallet to act. A wallet needs an agent to act safely. Mallow gives every request a Guardian that decodes, reads and simulates it before a single key is touched.

100%
of requests verified
zero
blind signatures
every
transaction intercepted
guardian.statustty/0
$ guardian --status
[OK] signer............ connected
[OK] decoder........... ready
[OK] simulator......... ready
[..] policy_engine ..... watching
guardian online
DECODE→READ_CONTRACT→SIMULATE→FLAG→SIGN→REPEAT→DECODE→READ_CONTRACT→SIMULATE→FLAG→SIGN→REPEAT→
// THE_TRADE_OFF

Every wallet today asks you to give something up.

Two patterns dominate when software moves money for you. Both work. Both force a compromise.

01Permissionsscoped session keys
ZeroDev permission accounts · ERC-7710 delegation

Mint a key that can only do narrow, pre-declared things — call transfer, spend no more than 10 USDC a day.

securityhigh
flexibilitylow
[!] The agent is confined to a policy written in advance. Anything that policy didn't anticipate simply cannot be expressed.
02Sub-accountsapp-controlled wallets
Coinbase sub-accounts · hierarchical accounts

Spin up a fresh, app-specific account the app controls, and fund it with only what would be acceptable to lose.

securitylow
flexibilityhigh
[!] Whatever is deposited is at the app's mercy. The blast radius is capped by giving the agent less to work with.

Either the agent is constrained in advance, or the amount it can lose is. Why delegate trust to each app, when an agent on your side could review every transaction directly?

// THE_GUARDIAN

It reads every transaction the way an expert would.

Every request — whatever agent or app sent it — flows through the Guardian before anything is signed. Watch it work, live.

guardian://reviewSCANNING
┌─ INCOMING_REQUEST
λ
third-party agent
requesting a signature
Swap 1,000 USDC → 0.42 ETH
target · Uniswap V3 · Router
0x414bf389 0000…000003e8 …42c1d
└─ TRY_ANOTHER
┌─ GUARDIAN_ANALYSIS
decode calldata
scanning
read target contract
simulate outcome
analyzing intent_

# The Signer stays a dumb EOA. Security doesn't come from a clever key — it comes from a Guardian that does real analysis on every request.

// ARCHITECTURE

Two parts. One review layer.

A simple Signer that holds the keys, and a Guardian that decides what gets signed. Everything else plugs in.

CORE
[K]Signer
dumb EOA · holds keys · signs only approved tx
approved←
[G]Guardian Agent
decode · read · simulate · sign
tx / sign request
↑
PLUGINS
~/yield_agentno account · approval only
~/stock_agentsession account
~/card_agentsession account · weekly cap
~/commerce_agentchain-abstracted account
// A_PORTFOLIO_OF_AGENTS

Install agents. Trust none of them.

Because verification lives in the Guardian, every third-party agent is just a plugin — each granted exactly as much trust and capital as it has earned.

mallow://allocationone identity · many leashes
~/yield_agentplain EOA · coreproposal only
~80%

Holds no account of its own. It can only propose moves toward higher yield; each one needs your explicit approval before the Guardian will sign. Maximum capital, maximum caution.

~/stock_agentsession accountauto within budget
~15%

Buys and sells tokenized equities automatically inside that budget. The session bounds the downside while the Guardian still inspects each call.

~/card_agentsession account · weekly capauto while normal
small

Draws up to a weekly limit, but only while spending patterns look normal. Anything anomalous escalates to approval.

~/commerce_agentchain-abstractedcross-chain
budget

Settles purchases across chains without you ever thinking about gas or which network the funds sit on.

$ One identity, one review layer, many agents — instead of a drawer of disconnected embedded wallets.
// THE_MANIFESTO

Capable agents.
Accountable by design.

Autonomous doesn't mean unaccountable. Every transaction request — from any agent, any app, any protocol — flows through the Guardian before a key is touched. You set the rules. The Guardian enforces them.

mallow://waitlist

A Guardian that never blinks.

> Be first to give your agents a wallet that verifies every transaction before a single key is touched.

$
Or watch it rule on a transaction right now — no signup, no wallet: [ open_playground ↗ ]