method
seven constraints define a mandate. each is evaluated before an agent action can pass.
allowed asset list — the agent cannot touch anything else in the wallet
cap per order and cap across the session
valid only between two clock times; default 16:00 → 09:30 ET
revokes when session loss exceeds the configured percentage
refuses action when the feed is stale; Chainlink RWA streams expose marketStatus (5 = closed) and have no heartbeat outside market hours
dies at the configured timestamp
one signature; immediate; applies to the whole mandate
enforcement path
wallet signature → entrypoint account validation → installed session-key policy → scope, size, window, breaker, oracle and expiry checks → execution or refusal. kill revokes the whole mandate. no custom validator is presented as deployed.