How it works
Intent → gate → sign → fill.
The engines read, the governor gates, you sign, the chain fills. Every step is recorded so the outcome is provable, not self-reported.
intent → gate → sign → on-chain fill → outcome · the whole record is hashed end-to-end
How it works
From market state to a signed fill.
Navigator maps the structure, Strategist matches a playbook, Governor sets how much is allowed. Live state in, a single verdict out.
Allow, resize, or block — with a hard size and leverage cap. The verdict carries a signed reason trail you can audit. Enforced by default; you can override.
Connect your wallet and sign client-side. We never hold a key. On Hyperliquid an agent wallet trades but can't withdraw; on CoW the receiver is your address.
The on-chain fill and its forward outcome are hashed into the decision record — intent → gate → fill → outcome — so the track record is provable, not self-reported.
Non-custodial by design
Your keys. Your funds. Your signature.
Handling real money publicly only works one way: never custody it. Hyperhelm holds nothing — every order is signed by you.
Hyperhelm is bring-your-own-wallet. You connect, you sign every order client-side, and the backend never touches a private key. Non-custodial is the single biggest de-risk for handling real money.
On Hyperliquid you approve an agent (API) wallet scoped to your own account. It can place orders but cannot withdraw or transfer — that boundary is enforced on-chain, not by us.
Every CoW spot order is built with the receiver hard-set to your wallet. Funds can only ever settle back to you — it is a structural invariant, not a setting.