aeraAERA FINANCEDocs · v1.0
Protocol · 09

Security, Honesty & Roadmap

Security posture — what's actually in place

  • The vault uses a restricted manager-role permission model: the agent can only call a narrow rebalance function, not access funds broadly.
  • Hard-coded spending limits, an approved asset list, and rate limits are enforced directly in the smart contract — not just described in a policy document.
  • An emergency pause function exists, allowing the system (or you, for your own vault) to halt activity immediately if something seems wrong.
  • The agent's signing key — the credential it uses to actually authorize trades — is secured using multi-party signing infrastructure (sometimes called MPC or a multisig setup), rather than a single, individually-compromisable hot wallet.
  • Continuous, automated monitoring watches for things like stale or failing market data, unusual trading patterns, or attempted violations of the on-chain constraints — with automatic pausing if something looks wrong.

Honesty — what we haven't finished yet

We think it matters more to tell you what's not done than to only describe what is. Specifically, as of this writing:

  • We have not yet completed an independent smart contract audit. This is a hard requirement before any beta involving funds beyond the founder's own, and we will publish the full results here once it's done — including any issues found, not just a summary.
  • Our regulatory framing hasn't been independently confirmed yet. AERA is deliberately designed so that you set the rules and the agent executes mechanically within them, specifically to avoid being classified as discretionary investment advice — but this is a legal question, and we're getting it reviewed by securities counsel rather than assuming our own reasoning is sufficient.
  • Backtesting is still in progress. We're validating the rebalancing approach against real historical Stock Token price behavior before it's trusted with any capital beyond the founder's own.
  • AERA does not, and will not, guarantee returns. The constraints described throughout this documentation govern what actions the agent is allowed to take — they say nothing about whether the market will move in your favor. Investing always carries the risk of loss.

Roadmap — where we are and where we're going

Phase 0 — Validation

Proving the core rebalancing idea manually, with no code and no live funds involved yet.

Phase 1 — Backtesting

Building and testing the rebalancing logic against historical market data, with no live funds.

Phase 2 — Founder-run live trial

Running the complete system — vault, agent, execution, monitoring — live and autonomously, using only the founder's own funds, to prove it holds up under real conditions.

Phase 3 — Closed beta

After legal and compliance review is complete, a small number of real users are onboarded.

Phase 4 — Public launch

General availability, with continued security hardening and compliance work as an ongoing process, not a one-time milestone.

Note

Phase 2 runs entirely on the founder's own funds — no outside capital is at risk before Phase 3.

We'll keep this page updated as each phase completes — including being upfront if something doesn't go according to plan.

Last updated July 2026 · v1.0