Frost 1.0
A native desktop app — Tauri 2, ~5 MB, for macOS, Windows, and Linux. Describe an automation in plain English and Frost compiles it into a signed, scoped, revocable on-chain mandate, then runs it while you walk away.
- IdentityMetaMask Smart Accounts
- AuthorityERC-7710 redelegation
- Settlementx402 over USDC
- InferenceVenice AI (native-x402)
- Execution1Shot API · private mempool
- AuditOn-chain Merkle commitment
Write your intent in plain English — a condition, an action, a limit. No code, no config files. Frost reads it like a brief.
The master agent compiles a structured mandate — caveats, caps, TTL, HITL thresholds — surfaces it for review. You sign exactly once with your MetaMask smart account.
Frost runs in the background. Sub-agents spawn on demand. High-stakes actions pause for your approval. An on-chain Merkle root logs every decision.
precision.
Every design decision in Frost traces back to one constraint: agents should do exactly what you authorised — no more, no less, never without a trail.
ERC-7710 redelegation chains hard-cap every sub-agent's spend, call count, TTL, and chain scope. Authority can only narrow, never expand downstream.
ERC-7710Set a value threshold — any transaction above it pauses the session and fires an OS notification. You approve or deny before execution resumes.
HITLNo standing agents. The master spawns specialists at runtime — pricers, monitors, executors — only when the trigger condition fires. Venice AI powers each call via x402.
x402 · VeniceYour seed phrase and private keys never leave your device. Agents operate with narrowly-scoped delegated credentials; revoke any branch in one click.
Non-custodialEvery session's full decision tree is hashed and committed as a Merkle root on Base Sepolia. Immutable, verifiable, attributable — without storing sensitive data on-chain.
Base · MerkleVenice AI is billed per call over the x402 protocol in USDC — no subscriptions, no API keys to manage. Unused budget stays in your wallet.
x402 · USDCSet a price trigger, a slippage cap, and a spend ceiling. Frost watches the market, finds the best route across DEXs, and executes — pausing for approval if the value exceeds your HITL threshold.
Define a voting policy — quorum threshold, keywords to watch, delegate rules. Frost monitors DAO proposals and casts your vote or posts a summary to your community channel when criteria match.
Define target allocations and a drift tolerance. When any asset drifts outside its band, Frost prices trades across venues, picks the cheapest route, and rebalances — with full on-chain receipts.
Frequently Asked
Questions
What is Frost?
Frost is a desktop app for bounded web3 automation. You describe a workflow in plain English; a master agent compiles it into a signed, scoped, revocable on-chain mandate and runs it autonomously within the limits you set.
Does Frost ever hold my keys?
No. Your seed phrase and private keys never leave your device. Agents act only with narrowly-scoped delegated credentials granted through your MetaMask smart account, and you can revoke any branch in one click.
Do I need API keys for inference?
No. Inference is paid per call in USDC over the x402 protocol — no subscriptions and no keys to manage. Unused budget simply stays in your wallet.
How do the spending limits work?
Every mandate carries explicit caveats — spend caps, slippage and gas ceilings, a TTL, a sub-agent count, and chain scope. Authority can only narrow as it flows down the delegation chain, so a sub-agent can never out-scope its parent.
What is human-in-the-loop (HITL)?
You set a value threshold. Any transaction above it pauses the session and fires an OS notification; nothing executes until you approve. Sub-mandates can only lower the threshold, never raise it.
Which chain does it run on?
Base Sepolia for the early-access build. Transactions are submitted through a private mempool to avoid front-running, and every session's decision tree is anchored as an on-chain Merkle root.