How it works

Rules your account enforces, an AI that trades inside them, and a bond behind your limit.

  1. Step 1: Say your rules

    The Mandate Architect turns your words into rules your account enforces. You sign the exact numbers.

    Example

    “Invest $5, never more than $1 a trade, and stop me at a 5% loss.”

  2. Step 2: The AI trades inside them

    Your account checks every trade on chain, and the Risk Officer sizes each buy to the loss room you have left.

    Example
    Buy $1.20 of TeslaRisk Officer: sized to $0.50, so a 25% drop would use half of your $0.25 loss room.
  3. Step 3: Past your limit, you're paid

    The Guardian stops the AI and the bond pays the difference. Anyone can make that call; nobody can block it.

    Example
    Down 24%: past your 5%Paid $0.96 from the bond

ExampleStep 2 in action: the same trade, two sets of rules.

It plays by itself until you pick one. This is a practice run. See the real one.

The decision: buy $1.20 of Tesla
Relaxed$1.50 per trade · prices up to 25 hours old
AI trader active
Waiting for a decision
Per trade$0.00 / $1.50
Price age0s / 25h
Checked in the same order every timeWaiting
Strict$0.50 per trade · prices up to 1 hour old
AI trader active
Waiting for a decision
Per trade$0.00 / $0.50
Price age0s / 1h
Checked in the same order every timeWaiting

The proof: a crash, and a payout

We crashed the market on testnet, once, on demo price feeds. Here is every step, each a real transaction.

  1. A guaranteed account opens

    $5.00 goes in with a 5% limit. The fee joins the bond, which sets aside the most this account could ever cost it.

    Opened(opens the transaction in a new tab)

  2. The agent buys stock

    $1.00 of Tesla and $1.00 of Amazon, inside the account's rules.

    Tesla(opens the transaction in a new tab)Amazon(opens the transaction in a new tab)

  3. The market falls 60%

    Both drill price feeds are cut. The account is worth $3.76, down from $4.95: a $1.21 loss, 24.3%, past its $0.25 limit.

    Tesla feed(opens the transaction in a new tab)Amazon feed(opens the transaction in a new tab)

  4. The guarantee pays

    One call stops the agent and pays $0.961769 from the bond: the loss beyond the limit, to the unit. Anyone can make that call. Nobody can block it.

    Settled(opens the transaction in a new tab)

  5. The account goes back to its owner

    The cover ends and the owner takes the account, with whatever it still holds.

    Closed(opens the transaction in a new tab)

A drill, not the live market: it ran on two demo price feeds and with a drill agent, so no real price, live account or live bond was touched. Every step is a real transaction on Robinhood Chain testnet. The drill’s guarantee.

The AI team

Six roles behind every guaranteed account. None of their work is taken on trust.

Mandate Architect
Turns what you write about your money into the rules your account enforces.
You see and sign the exact rules. Its prompt is published.
Analyst
Kedge’s AI trader. Reads the market and decides to buy, sell or hold.
Every decision is a receipt on chain, with its reason.
Risk Officer
Sizes every buy to the loss room you have left, or holds it back.
Its note is on the receipt, next to the trade.
Guardian
Stops the AI and triggers your payout when a loss passes your limit.
One public call. Anyone can make it, nobody can block it.
Underwriter
Prices the guarantee. The contract never covers more than the bond holds.
Fully backed, checked on chain at every deposit.
Concierge
Answers your questions about your account.
Only from your own receipts, and it cites them.

Why this matters

“Crucially, humans remain in control by deciding exactly how much capital to allocate and set the specific safety guardrails.”
Robinhood, announcing Agentic Trading, July 1, 2026. The announcement(opens in a new tab)

Kedge enforces those guardrails on chain, and guarantees the result.

Kedge is an independent project, not affiliated with Robinhood.

Without Kedge, and with it

Without Kedge

  • When an AI trader loses your money, the loss is yours, all of it.
  • Its limits live in its own code, where it can change them.
  • You can’t check what it did, or why.

With Kedge

  • Past your limit, a bond pays you back. Nobody can block it.
  • Your rules live in your account. The AI can’t change them or take money out.
  • Every decision, refusal and payout is on a public record anyone can check.

Questions

  • Is this real money?

    No. Everything here uses test money that has no value.

  • What does the guarantee cover?

    Losses past the limit you pick, from 2% to 20%, up to a 30% loss. If your account falls further than your limit, the AI is stopped and the bond pays the difference.

  • Where does the payout come from?

    A bond the AI’s maker locked in a contract. It never covers more than it holds: it refuses a deposit it couldn’t pay out. See the bond

  • Can Kedge stop a payout?

    No. Settling is one public call that anyone can make. The backer can only take back bond no cover needs, and there is no pause.

  • Can the AI take my money out?

    No. Only you can take money out, and when we tried it as the AI, it failed. See the proof(opens in a new tab)

  • What is a tokenized stock?

    A digital token that follows the price of a real company’s stock, like Tesla. The ones here are test versions with no value.

  • What is Robinhood Chain?

    Robinhood’s own blockchain, built on Arbitrum. Kedge runs on its test network, a public record anyone can check.

  • What happens when the stock market closes?

    Stock tokens trade 24/7, but their reference prices freeze when markets close. Kedge stops the AI from trading on a frozen price, and the guarantee settles only on a fresh one.

For buildersThe contracts, the tests, the security review and the code.

Kedge lets an AI agent trade tokenized stocks through an account contract the user owns, which enforces the user’s assets, spending limits and execution rules on chain. The agent’s address can call trade() and nothing else. Each trade is checked against the owner’s mandate in a fixed order: the per-trade limit, a fixed 24-hour budget, a cost cap per stock, the reference price’s age, a price check against the exchange’s quote, and the Stock Token’s own pause flags.

A refusal doesn’t revert: the account emits Blocked with the reason and the two numbers the rule compared, and moves nothing. For the live agent (Claude Haiku 4.5, one decision every 10 minutes), each receipt number is the keccak256 of the decision’s published record, and Verify re-hashes it in the browser.

Guarantee tests
35 unit and fuzz tests · 5 invariants over random runs · a mainnet fork with real USDG, Stock Tokens and Chainlink
Account tests
152 contract tests · 11 fuzz properties at 1,000 runs · 7 invariants at 32,768 calls each · 31 hand-made mutants, all caught
Security review
Hostile price feeds, venues and tokens. No finding let the agent move funds.The findings(opens in a new tab)
The agent
Claude Haiku 4.5, one decision every 10 minutesStatus(opens in a new tab)
Money
Paxos USDG and Robinhood’s test Stock Tokens
Reference prices
A demo feed on testnet; the real Chainlink prices are on the demo

A real refusal on Robinhood Chain testnet, with its details

Blocked
Tesla (TSLA)

Your AI trader tried to buy $1.20 of Tesla (TSLA).

Blocked: your per-trade limit is $0.50. Nothing moved.

Recorded on Robinhood Chain testnet
What the rule checked$1.20 requested · $0.50 allowed
The AI trader’s reason

A scripted demo decision, the same one the Relaxed account executed.

Receipt number
Reason code
TradeTooLarge
Transaction
0xb36b…84c6