ForgeOS lets AI agents act on-chain without holding your wallet keys. You grant one scoped, revocable ERC-7715 permission in MetaMask Flask. Every sub-delegation can only narrow that scope (never wide
ForgeOS is the on-chain spending firewall for autonomous AI agents.
Most agent stacks give an AI a wallet and hope for the best. ForgeOS does the opposite: you grant one scoped, revocable ERC-7715 permission in MetaMask Flask, and every sub-delegation an agent creates can only narrow in scope — never widen. One kill switch revokes the entire tree on-chain.
What it does
Activation: MetaMask Smart Accounts (ERC-7715/7710) with spend caps, allowed targets, and expiry caveats backed by verified MetaMask Delegation Framework enforcers on Sepolia
A2A coordination: 2-hop narrowing chain (Orchestrator → DeFi agent → Payment agent) with on-chain CaveatWideningNotAllowed reverts when an agent tries to expand permissions
Venice AI: Zero-retention intent parsing in the main loop, paid per call via x402 USDC on Base
1Shot relay: Gasless ERC-7710 execution with Ed25519-verified webhooks → SSE → dashboard; UI only shows “Confirmed” after a real receipt
Treasury: Per-user USDC budgets in AgentTreasury before any spend
Product surface: No-code agent builder, marketplace, delegation tree UI, system status page, and always-visible kill switch
Live demo: https://forgeagent.vercel.app
Contracts (Sepolia): OSKernel, AgentTreasury, ForgeOSRegistry — verified on Etherscan
Repo: https://github.com/Officialhomie/ForgeOS
Built for the MetaMask × 1Shot × Venice Dev Cook Off. Targets: Best Agent, Best A2A Coordination, Best x402 + ERC-7710, Best Venice AI, Best 1Shot Relayer.
<hr><h2><strong>Progress During Hackathon</strong></h2><p><span><strong>Week 1 — Core primitive</strong></span></p><ul><li><p>Deployed OSKernel, AgentTreasury, and ForgeOSRegistry to Ethereum Sepolia</p></li><li><p>Implemented ERC-7715 activation wizard (connect → deploy kernel → scoped permission grant → fund treasury)</p></li><li><p>Built delegation encoding, proof bundles, and creation-time narrowing validation (<code data-inline="true" spellcheck="false">CaveatWideningNotAllowed</code>)</p></li><li><p>Wired 1Shot <code data-inline="true" spellcheck="false">relayer_send7710Transaction</code> with webhook verification and SSE status pipeline</p></li></ul><p><span><strong>Week 2 — Agent runtime & integrations</strong></span></p><ul><li><p>End-to-end command flow: Venice intent → action plan → 1Shot gasless relay → webhook-confirmed UI state</p></li><li><p>Auto 2-hop sub-delegation chain (500 USDC → 100 USDC / single call) without extra user signatures</p></li><li><p>Venice x402 micropayments on Base mainnet for zero-retention inference</p></li><li><p>Agent cron runner, treasury fund/withdraw, and kill-switch <code data-inline="true" spellcheck="false">revokeAll</code> path</p></li></ul><p><span><strong>Week 3 — Product & ship</strong></span></p><ul><li><p>No-code agent builder (3-step flow with enforcer-backed caveats)</p></li><li><p>Marketplace UI with install flow and registry API</p></li><li><p>Dashboard: delegation tree, spending view, subscriptions, system status (truthful red/green checks)</p></li><li><p>The Graph subgraph for delegations/registry; RPC fallback when indexing lags</p></li><li><p>Per-wallet activation persistence, stale-state recovery after contract redeploys</p></li><li><p>Production deploy to Vercel; 12/12 Foundry tests; full Next.js build (35 routes)</p></li><li><p>Submission assets: Playwright screenshot pipeline, demo scripts, and documentation (README, <a href="http://SUBMISSION.md">SUBMISSION.md</a>, DEMO_PLAYBOOK)</p></li></ul><p><span><strong>Current state:</strong></span> Full-stack MVP live on Sepolia + Base x402. Marketplace listings are UI-complete; golden-path Etherscan evidence txs are being recorded for final submission proof.</p>