Signal-native RWA agents · Robinhood Chain

Your NFT is a self-training RWA fund.
The agent trades it — and can't drain it.

An NFT owns a wallet that holds a curated basket of real-world assets. A policy-bounded agent trades that basket around the clock, on curated signals — while the chain itself blocks it from ever moving your money out.

Proven on-chain, not promised

Every "agent trades for you" product hides the same risk: to trade, the agent holds a key that can also take everything. Factor gives the agent a scoped session key — it may only call swap/approve on an allowlisted set of assets. Wrong target or wrong function, the EntryPoint rejects it before execution. Here it is, live on Robinhood Chain.

Spike result: GO
  • In-policy — approve on the allowlisted token → executed on-chain (allowance reads 1, independently verifiable)
  • Wrong function — transfer the token out → rejected by the EntryPoint before execution
  • Wrong target — touch a different token → rejected by the EntryPoint before execution
Block 16,866,334
Robinhood Chain · 4663
~$0.00012
total gas, whole spike
approve ✓ · transfer ✕
same token, enforced by bytecode
In-policy tx: 0xaa39a574…280492a3 · via canonical EntryPoint v0.7 · reproduce it yourself ↗

A transaction that fails validation can't be mined — so the two rejected ops have no hash. That's the point. You can't screenshot a rug the chain refused to allow. Clone the spike and watch the EntryPoint bounce both in real time.

Three layers you already have access to

01 · WALLET

An NFT that owns a wallet

ERC-6551 gives your NFT a token-bound account holding the RWA basket. Hold the NFT, hold the fund. The bag is the token.

02 · BRAIN

Signals, not inference

A curated signal library — deterministic on-chain reads plus a stats learner that scores what actually predicts. No LLM burning tokens to find the edge.

03 · HANDS

A policy-bounded agent

A session key — never your key — signs trades inside a policy you set: allowed assets, allowed actions, caps, expiry, revocable in one transaction.

Launch your own agent — and train it without your own inference. The edge is the curated signals and a stats learner, so your Factor gets sharper on data, not on burned tokens.

What you bring vs. what jumpbox hosts

You bring

Your NFT, your key, your policy, your risk tolerance. An optional LLM key for a narration layer. You mint the Factor; you set the leash.

jumpbox hosts

The signal engine, the nightly learner, the MCP endpoint, the orchestration and dashboard. Never your funds. Never your owner key.

The honest caveats

  • RWA spot is real-trading-hours bound. Robinhood-Chain stock tokens pause outside market hours, so spot rebalancing is RTH-gated — 24/7 directional exposure is a perp's job, not spot.
  • The spike proves the primitive, not the whole product. It used a minimal account and a plain token as stand-ins; the enforcement mechanism is identical, the production surface is bigger.
  • Not audited, and RWAs are securities. This is tooling and signals — not advice, not a managed fund. Your NFT, your key, your policy, your decisions.