Execution
Real fills. You hold the keys.
The governed verdict closes the loop into rented execution — without renting your custody. Perps on Hyperliquid, spot on CoW, both non-custodial.
- BTC/USD and ETH/USD, long/short with leverage, capped at the governor's max.
- You approve an agent (API) wallet on your own account — it trades, it cannot withdraw.
- Native TP/SL trigger orders with OCO grouping; you sign the L1 action client-side.
- cbBTC and WETH vs USDC — MEV-protected, gasless settlement via CoW solvers.
- EIP-712 order signed by your wallet, receiver hard-set to your address.
- No agent wallet needed — your wallet signs directly on mainnet.
The governor is a gate — not an unbreakable wall.
Enforced by default. With the gate on, a closed verdict greys out the deploy button. Only ALLOW and RESIZE intents reach execution — and a resize ships the capped size, never more.
Override is yours. It's your wallet, your signature, your liability — so you can turn the gate off. Override takes an explicit acknowledgement and shows a persistent banner while it's off.
Both are logged. Enforced and override fires are tagged and tracked. That counterfactual is exactly how the benchmark proves what the gate adds — agency for you, a measurably-additive governor for the record.
Fees
Usage-based. No subscription, no wall.
Hyperhelm bills the execution edge, not the looking. Viewing the governed verdict is free; a small, transparent fee is charged only when a trade actually executes — collected by the venue, shown in the ticket.
A small fee in basis points of notional, approved once by you up to a cap. The venue deposits it automatically at fill — no invoice, no signup.
A modest partner fee carried in the order's app data. CoW collects and routes it on settlement — gasless, non-custodial.
Shown transparently in the deploy ticket before you sign. You bill for the value created — the governed trade — not for reading the verdict.
Mainnet execution launches behind a flag, an allowlist and small size caps, then graduates — after a security review of the order path, the receiver-is-you invariant, and a max-notional kill switch. The cockpit is live to view and connect today; turning on real fills is a deliberate, staged step.
Non-custodial by design
Your keys. Your funds. Your signature.
Handling real money publicly only works one way: never custody it. Hyperhelm holds nothing — every order is signed by you.
Hyperhelm is bring-your-own-wallet. You connect, you sign every order client-side, and the backend never touches a private key. Non-custodial is the single biggest de-risk for handling real money.
On Hyperliquid you approve an agent (API) wallet scoped to your own account. It can place orders but cannot withdraw or transfer — that boundary is enforced on-chain, not by us.
Every CoW spot order is built with the receiver hard-set to your wallet. Funds can only ever settle back to you — it is a structural invariant, not a setting.