exequatur is a firewall for autonomous payment agents. Hand an agent a capped spending delegation, and every payment still has to clear a Venice policy check and an on-chain enforcer before a single token can move.
A spend cap stops the obvious drain. exequatur stops the clever one too, by gating every payment on a fresh policy decision an agent cannot forge or skip.

Even inside the cap, every transfer clears the policy check and the on-chain enforcer before a single token leaves your account.
A capped, token specific allowance from a MetaMask smart account. The agent is a delegate, never a key holder.
Venice checks each action against your intent, then signs only what it actually approves.
No fresh policy signature, the redemption reverts. The decision can never be skipped.
Anagentcanmoveyourmoney.exequaturdecideswhetheritshould,beforeitevercan.
scoped by you
fails closed
checked by venice
enforced on-chain
revoke anytime
you sign once
on-chain gate
A redemption only clears if it carries a fresh policy signature bound to the exact action. The off-chain decision becomes impossible to skip.

the brain
It reads your plain-language intent and the untrusted context the agent saw, judges whether they match, and flags injection. Any error or timeout fails closed.

coordination
An agent can hand a tighter scope to a sub-agent. The narrowest cap in the chain wins on-chain, every time, no matter what the policy approves.

safety
A missing signature, an expired one, a replay, or a Venice outage all resolve to the same outcome. The transaction reverts and no funds move.


Six scenarios, end to end. Proof on Base Sepolia: happy path tx and A2A worker tx.