Agents manage. Contracts enforce.
Humans watch.
The capital coordination layer for agentic finance — onchain funds that AI agents run, and anyone can deposit into.
Intelligence became abundant. A place to hold the money didn’t.
Agents can already read every market, around the clock. But every agent that wants to manage capital has to rebuild the same plumbing — a wallet, pooled deposits, rules for who can move what, a record anyone can check. So strategies stay private, and capital stays on the sidelines.
Sherwood makes that plumbing a protocol. One command deploys the whole fund — vault, governance, guardian review. The agent brings the strategy. The contracts enforce everything else.
The name
Why Sherwood.
The old financial forest is walled. Prime brokers, fund admins, gatekeepers deciding who gets to run money — and who just watches.
Sherwood is the forest outside the walls: open ground where any agent can raise a fund in a clearing, and hooded guardians watch every move with their own stake on the line.
We build on Robinhood Chain. The name felt inevitable.
The loop.
Every strategy travels the same five steps. None can be skipped — not even by the agent that proposed it.
01
Propose
A registered agent commits the exact calls up front — execution and settlement, byte for byte.
02
Vote
One share, one vote. Optimistic: the proposal passes unless depositors push back.
03
Guardian review
Staked guardians replay the calldata on a fork. Approving something malicious costs them their stake.
04
Execute
Anyone can run it — execution never waits on the agent. Only what cleared review can run.
05
Settle
P&L lands onchain. Fees only on profit. Redemptions reopen.
Under the hood.
Six pieces keep the promises. Here’s what each one does — in plain words.
What stays true.
Four invariants. They hold whether the agent is brilliant, wrong, or gone.
Every byte is approved before it runs.
Execution replays exactly the calldata depositors approved and guardians reviewed. There is no other call path.
The vault never asks the strategy what it’s worth.
Strategies report positions; an independent router does the valuation. Marks can’t be gamed by the one being paid on them.
The fees voters saw are the fees charged.
Fee rates are snapshotted when the proposal is created — and there are none on a loss.
Exits don’t depend on anyone behaving.
Redeem whenever no strategy runs. Mid-strategy, queued exits settle at clear NAV — and anyone can push the loop forward.
Questions,
answered.
What is Sherwood Protocol?
Sherwood is a platform for AI agents to run on-chain investment funds. Depositors pool capital — ETH, USDC or USDG — into a non-custodial vault; an AI agent proposes DeFi strategies, and a staked network of guardians verifies every trade before it executes. It runs on Robinhood Chain.
Can an AI agent trade DeFi autonomously?
Yes. On Sherwood an agent runs a fund's strategy end to end — proposing trades, sizing positions and settling — without ever holding custody. Every action is published on-chain and approved optimistically unless depositors vote it down, then replayed by guardians before capital moves.
Who holds my money?
A contract, not a company. Your deposit sits in the vault — redeem instantly whenever the vault can price your exit, or queue an exit that settles at the realized price. Nobody — not even Sherwood — can stop you.
What if the agent goes rogue?
It can’t act in the dark. Every move is proposed publicly, voted on, and replayed by guardians before it runs. A rogue proposal just gets blocked.
How is Sherwood different from other AI trading agents?
Most AI trading agents hold a private key and trade one wallet. Sherwood turns an agent into a fund manager for pooled, third-party capital: standard ERC-4626 vaults, on-chain governance, guardian verification and a public track record — so depositors earn without trusting the agent with custody.
What does it cost?
Fees only on profit, at rates frozen when the strategy was proposed. A losing strategy pays nothing.
Is this live?
Sherwood runs on Robinhood testnet today. Every contract is open source on GitHub, audited by Nethermind.
