DOCS /NATIVE VENUES & GUARDS
The transaction layer
Yeetful builds transactions with per-venue builders and a shared guard — the model that understood your ask never writes calldata, amounts, or addresses. It picks a builder; the builder derives the artifact from live venue state; the guard re-checks it before your wallet ever sees it. When a check fails, you get the reason, not a guess.
The doctrine
- Parse deterministically. Money asks are claimed by native parsers, not sampled from a model. “Swap 20 USDC for ETH on Base” hits the same code path every time.
- Build from venue truth. Quotes, pools, reserves, positions, balances — fetched live at build time. Artifacts expire and are rebuilt, never reused stale.
- Guard fail-closed. Every artifact is re-derived or decoded and checked against policy as the last step. Any mismatch kills the build.
- Your wallet signs. Nothing here is custodial — the layer produces artifacts; only your signature moves money.
- Receipt everything. Built, signed, refused — each with its priced value (
valueUsd) and the layer that built it, on your dashboard.
Venues
| Venue | What it builds | Chains | The guard |
|---|---|---|---|
| CoW Protocol | Swaps and limit orders as EIP-712 order artifacts; submission relayed after a second policy gate. | Base · Ethereum · Arbitrum | Order fields re-derived from the quote; the submit relay re-checks policy — a tampered order dies twice. |
| Uniswap v3 | QuoterV2 pool scan → one SwapRouter02 multicall; approve → swap offered as a self-advancing chain. | Base · Ethereum · Arbitrum · Robinhood | Swap step re-quoted at sign time; calldata selectors and addresses pinned to the registry, never model-written. |
| Uniswap v4 | Fallback when v3 has no pool — tokenized stocks (AAPL, TSLA, …) vs USDG on Robinhood Chain. No-hook pool scan → ONE Universal Router execute with exact-amount Permit2 approvals. | Robinhood | The v4 calldata guard decodes the full execute path and fails closed on any unknown command, hook, or amount drift. |
| Cross-chain (NEAR Intents) | Bridge/swap across chains via solver auction: one transfer to a one-time deposit address, solvers deliver on the destination. | Base ↔ Arbitrum ↔ more | The transfer must move EXACTLY the quoted amount to the tool-returned deposit address — a fabricated address cannot survive the check. |
| Aave | Supply, withdraw, borrow, repay — anchored to your live reserves and portfolio before building. | Base · Ethereum · Arbitrum | Pinned function selectors; reserve ids matched as sets (an asset can list twice); health-factor preview gates every borrow. |
| Hyperliquid | USDC deposits (bridge transfer) and perp opens/closes as signable L1 actions — IOC orders with bounded prices. | Arbitrum + HL L1 | Deposits pin the canonical Bridge2 and check balances; orders enforce min-notional, collateral, side, and reduce-only-on-close. |
| Guardian | Stop-loss / take-profit closes under a delegated, reduce-only agent key. | Hyperliquid | Rebuilt and re-guarded at trigger time — delegation, kill switch, size, side, and the trigger itself all re-checked. See the Guardian page. |
| Snapshot | DAO votes as EIP-712 typed data your wallet signs. | Off-chain (Snapshot) | Proposal and choice anchored to the live proposal — the vote you see is the vote you sign. |
Compound intents ride on top
Chain steps with “then” and the jobs compiler sequences these same builders — each step built and guarded only when it’s offered, settlement verified between signatures. One venue’s guard never has to trust another’s output.
See it decide
Every build traces its decisions — which layer claimed the ask, what it fetched, why it refused — to the live activity terminal. The layer argues its case in public.