What's enforced on-chain
These rules are enforced by the Solana program itself ??they cannot be bypassed by any off-chain party, including the protocol developers.
| Rule | Enforcement mechanism | Why it matters |
|---|---|---|
| Only AI agent pubkey signs protected instructions | Signer check in every instruction handler | Issuer cannot drain funds after setup |
| Will execution blocked until AI activates | updated_by_ai flag checked in execute_will | Prevents issue-and-collect attacks |
| Death timeout minimum 30 days | Validated in create_will / update_will | Prevents short-timeout griefing |
| Death condition verified at execution time | Timestamp check in execute_will | Cannot execute will while agent is alive |
| Beneficiary percentages sum to 100 | Arithmetic validation in will instructions | Prevents fund loss from misconfiguration |
| DecisionLog created for governed transfers | Account created atomically with transfer | Audit trail cannot be separated from the action |
What is NOT enforced on-chain
- Heartbeat scheduling ??the agent chooses when to heartbeat (off-chain logic)
- Transfer amount limits ??the skill document recommends thresholds but the program allows any amount
- MPC Bridge availability ??the bridge is off-chain infrastructure
- Agent decision quality ??the program logs decisions but does not validate reasoning