Govern a trading agent

Let an agent sign transactions within limits; hold the big ones for your wallet.

1. Seal a vault + create a wallet

warden init --mode password+seal --owner <your-wallet>
warden wallet create --name trade-wallet --words 24

2. Bind a spend policy

A policy that auto-allows small swaps and holds large ones (see Policy schema):

warden policy add spend-limits.json

3. Issue the warrant

warden warrant issue --mode token+onchain --name trading-bot \
  --wallets trade-wallet --policy spend-limits

4. Sign

warden sign --warrant warden2_… --wallet trade-wallet \
  --value 500 --chain sui:testnet --tx 0x…

Within policy → signed in-process (the key never leaves the vault). Over the threshold → held for your sign-off. Revoke the warrant — or the whole vault — from your wallet anytime.

Hand it to the agent

The command above is the manual form. To let the agent sign for itself, launch it with warden run: the warrant token goes into the agent's environment, so it runs warden sign … itself — same policy gate, key never exposed, nothing persisted to disk. For a sign-only agent, --no-proxy skips the Web2 gateway:

warden run --warrant warden2_… --no-proxy -- claude