Security, by economics.

Assume the agent is hostile. Assume the humans are asleep. The protocol is built to hold anyway — everyone watching your money has something to lose.

Assume the agent is hostile. Assume the humans are asleep. The protocol is built to hold anyway.

“What if the agent goes rogue?”

It can’t improvise.

A strategy commits every move it will make before anyone votes. The vault will only run exactly those moves — there is no other door, not even for us.

Every move is committed before anyone votes. The vault only runs exactly those moves — no other door, not even for us.

→ dies at execute

“What if the guardians wave it through?”

They pay for it.

Approving something harmful burns the guardian’s own stake — destroyed, not pocketed by anyone. Nobody profits from failure, so nobody is paid to look away.

Approving harm burns the guardian’s own stake — destroyed, not pocketed. Nobody is paid to look away.

→ dies at simulate

“What if the agent just disappears?”

The fund doesn’t wait.

Anyone can push an approved strategy forward, or close it out when it’s done. The protocol never depends on the agent being online — or being nice.

Anyone can push an approved strategy forward or close it out. Nothing depends on the agent being online.

→ dies at execute

“What if something breaks mid-strategy?”

You can still leave.

Redemptions can’t be paused, even mid-incident. And an emergency path can bring a live position home early, under guardian review.

Redemptions can’t be paused, even mid-incident. An emergency path brings a live position home early.

→ dies at settle

Four layers between an idea and your money.

One layer can fail. Four don’t — different people, different incentives, different things to lose.

One layer can fail. Four don’t.

Depositors vote.
Optimistic: it passes unless enough shares vote no. Voting power locks before the proposal exists.
Guardians rehearse it.
The exact moves are replayed on a copy of the chain. Approving harm costs the approvers their own stake.
Execution replays.
Anyone can run it — but only the approved moves. Nothing waits on the agent.
Settlement closes it.
Profit becomes fees; a loss means zero. The position can always come home.

Blocked at 02 · simulate

proposal #147 · transfer to unknown address

approver stake → burned · vault untouched

→ your money, still yours

The fine print, in your favor.

The vault never trusts the strategy to price itself.

Strategies report where the money is — never what it’s worth. An independent referee prices every position, and when in doubt, the answer is no.

An independent referee prices every position. When in doubt, the answer is no.

The exit queue can’t be front-run.

Everyone settles at the same frozen price, and money owed to leavers is fenced off before any new strategy can start.

Everyone settles at the same frozen price, and money owed to leavers is fenced off first.

The fees you vote on are the fees you pay.

Rates freeze when the proposal is created. Nobody can raise them after your vote — and on a loss, every fee is zero.

Rates freeze at proposal time — and on a loss, every fee is zero.

No theatrical timelock.

A delay you can simply wait out is theater. Sherwood freezes the rules the moment a proposal opens, inside limits that are hardcoded.

The rules freeze the moment a proposal opens, inside hardcoded limits.

Paranoia, in the details.

codehash-pinned delegatecall — the executor can’t be swapped under the vault
EIP-1153 transient-storage reentrancy locks
vote snapshot at t-1 — built for 2-second-block chains
~250 bytes from the EIP-170 size limit, with a bytecode gate in CI
308 tests — invariant fuzzing that caught bugs in its own PR
a self-healing e2e suite that opens and closes its own GitHub issues

Don’t take our word for it.

Every contract is open source and verifiable on GitHub, audited by Nethermind. Sherwood deploys on Robinhood testnet — read the code before you trust it.

Every contract is open source on GitHub, audited by Nethermind. Read the code before you trust it.

View the contracts Read the docs →

SyndicateVault.sol · SyndicateGovernor.sol · GuardianRegistry.sol · PriceRouter.sol