SURFACE · 02 / AIA · OFF-CHAIN

Attested Intent Agent.

The evidence surface of the judgment core. For every intent that passes the policy gate, the AIA renders a human-readable, externally verifiable clear-signing receipt: what was approved, under which policy commit, by whom. An independent quorum co-signs it before execution.

aia · receipt · leg 5 / 6● QUORUM 3/3

“Post-trade single-issuer exposure: 8.4% against a cap of 8.0%. Approve override?”

soft band · risk-officer authority

nav_oracle✓ SIGNED

custodian✓ SIGNED

risk_officer✓ OVERRIDE · CO-SIGNED

bound_topolicyCommit 0x9f4a…

§ 01 / Architecture

Decision → receipt.

The AIA sits between the OMA Validator and the wallets that must clear-sign. It is built on open standards: ERC-7730 descriptors that pin the policy commit and an ERC-8176 multi-signer quorum over the descriptor digest, so any supervisor can verify the receipt without trusting OnTrade.

fig.06 / aia pipelinerender → verify → quorum → bind

§ 02 / Guarantees

Attestation, made uniform.

GUARANTEE · 01

Plain-Language Receipts

What was approved, under which policy commit, by whom: human-legible for the signer, machine-verifiable for the supervisor. ERC-7730 descriptors pin the commit hash.

GUARANTEE · 02

Independent Quorum

NAV oracle, custodian, and risk officer co-sign before execution (ERC-8176). The required signer set is defined per consumer, not per deal, so attestation stops being bespoke.

GUARANTEE · 03

Safe by Default

If any check fails, the AIA withholds the receipt rather than emit a bad one. No receipt, no execution. Every refusal is itself a labelled record.

§ 03 / Worked Example

One escalation, on the record.

The AIA is where human judgment enters the stream. A soft-band breach, a plain-language rationale, a named officer’s override. The near-miss with reasons is a record that exists in no PMS, no explorer, and no compliance archive today. Here, it is first-class.

09:00 · BATCH

A six-leg cross-asset rebalance posts from the PMS. The Validator pre-flights all legs against 142 compiled rules in ~280ms: five admit; leg five lights amber.

STEP · 01/04

09:02 · RECEIPT

The AIA drafts the rationale in plain language: post-trade single-issuer exposure 8.4% against a cap of 8.0%. A soft band, risk-officer authority. Approve override?

STEP · 02/04

09:04 · QUORUM

The risk officer reads the rationale and co-signs the override; the NAV oracle and custodian have already signed. The MPC quorum releases the batch.

STEP · 03/04

09:06 · ANCHORED

All legs settle atomically; the audit pack lands with the depositary. Ten labelled judgments captured from one routine rebalance.

STEP · 04/04

§ 06 / Access Testing

Join the waitlist for access testing.

Access is rolling out to a scoped cohort of regulated institutions through structured, milestone-gated pilots. Drop your details and we'll coordinate briefings, mandate intake, and pilot onboarding as your category opens.

OR · contact@ontrade.finance