FAQ

Which networks does Warden support?#

Base Sepolia only, for v0.1. Mainnet waits for an audit.

Which tokens can an agent spend?#

Native ETH and any ERC-20 you give it a limit for. The demo uses Circle's test USDC on Base Sepolia, 0x036CbD53842c5426634e7929541eC2318f3dCF7e, which has 6 decimals.

Why is my payment denied when it is under the cap?#

The account reports the first rule the payment breaks, in a fixed order. A payment under the cap can still fail an earlier rule (the recipient is not allowlisted, the policy has not started) or a later one (the window is nearly full, the account is short). Read the reason; the policy reference explains each one.

Why was my large payment denied instead of sent for approval?#

Caps are checked before the approval threshold. A payment over perTx or over what is left in the window is denied, because approving it would fail anyway. Raise the cap if such payments should be possible with your approval.

Does editing a policy reset the budget?#

No. Spending recorded in the current window stays counted, even after a revoke and re-register. Otherwise an owner could be talked into refilling a budget by "fixing" a policy.

When does the daily window reset?#

At 00:00 UTC. Windows are fixed: floor(now / period) * period. An hourly window resets on the hour.

What happens to a request nobody answers?#

It expires after the request lifetime, 24 hours by default, and can no longer be approved. The agent has to ask again. You can set the lifetime between 1 second and 30 days.

Would Warden have prevented the OpenAI incident?#

Not directly. In that incident, disclosed on 15 October 2026, a research model that ran out of test ETH derived keys from publicly known seed phrases and paid from a wallet it did not own (OpenAI's report, CoinDesk, Gizmodo). Warden cannot stop an agent from using some other wallet. It gives an agent a budget of its own, with limits it cannot change, so the agent has less reason to improvise and a smaller blast radius when it does.

Who pays gas?#

The agent pays gas for pay and call from its own key. The owner pays for setup, approvals and withdrawals. The dashboard can send an agent a small amount of ETH for gas.

Can an agent see or change its own policy?#

It can read it (getAgent and check are public views). It cannot change it: only the owner can call setAgent, and agents cannot call the account itself.

Can I have more than one account?#

Yes. Each owner and salt pair gives one account. The dashboard creates them with the salts "main", "account-2", "account-3" and so on (the SDK also defaults to "main"), and lists them in the account switcher.

Can two people own one account?#

Not in v0.1. A Safe module version with multiple owners is planned. Until then, the owner can be a Safe itself.

Is x402 supported?#

Not yet. Paying x402 invoices from the account needs ERC-1271 validation of EIP-3009 authorizations, planned for v0.2.

Where are agent names stored?#

In your browser only. The contract stores addresses, not names.

What does the website collect?#

Nothing beyond standard server logs. It reads public chain data and asks your wallet to sign; it has no accounts and no database.