Monad Playground · Pitch Deck Monad Playground · Pitch Deck

Sealmoss

给 Moss Capability 树盖章：Agent 必须 simulate、遇 Warning 即停，并把有序 Receipt 与 Intent 对齐后，才嵌套未签名 Capability。

The seal for Moss Capability trees — Agents must simulate, stop on Warnings, and align ordered Receipts with Intent before any unsigned Capability is nested.

打开 Demo →Open live demo → GitHub Workbench

sm.limlamleen.com · github.com/KarlLeen/formoss · /pitch

Moss · Sealmoss Moss · Sealmoss

Moss 造证据；Sealmoss 强制用证据

Moss makes evidence; Sealmoss forces its use

Moss 把 Kuru swap、WMON wrap 等做成协议自带 Capability：action 建未签名树，simulate 产出 Warning 与有序 Receipt——从不签名、从不广播。

Moss turns ops like Kuru swap and WMON wrap into protocol-owned Capabilities: action builds an unsigned tree; simulate emits Warnings and ordered Receipts — never signs or broadcasts.

Moss 默认不强制 Agent 用证据。Sealmoss 把纪律变成硬闸门：证据没用到位，就不给出可嵌套的 Capability。

Moss does not force Agents to use that evidence. Sealmoss hard-gates it: no nested Capability unless the evidence was used.

Intent → Moss action → Moss simulate → Sealmoss align → verified envelope 失败 → failed-run，capability: null（不能软忽略后还拿走可签树） Fail → failed-run, capability: null (no soft-ignore path to a signable tree) 凡走 Moss（action → simulate → Receipt）的路径，都能在交给钱包之前嵌一层 Sealmoss Any path already on Moss (action → simulate → Receipt) can nest Sealmoss before the wallet

github.com/nishuzumi/moss

缺口 · 三道硬门 Gap · three hard gates

证据交出来了，Agent 仍可能绕过

Evidence exists — Agents can still bypass it

Simulate 强制 — 堵住「不 simulate 就往下走」；无 Moss 证据 / fixture 就没有 verified
Simulate mandatory — blocks skipping simulate; no verified run without Moss evidence or a fixture
Warning 即停 — 堵住「装作没看见」；failed-run，capability: null
Stop on Warning — blocks soft-ignore; failed-run, capability: null
Receipt ↔ Intent — 堵住「不对照用户意图」；有序叶子文本对齐（spender、Kuru minOut 等）后才写 verified envelope（含 sha256 digest）
Receipt ↔ Intent — blocks skipping alignment; ordered leaf texts must match before a verified envelope (with sha256 digest)

签名仍在信封外；行业信号也指向同一缺口（约定 ≠ 运行时闸门）：

Signing stays outside the envelope. Industry signals point to the same gap (docs ≠ a runtime gate):

Moss agent-skill 必须 simulate / Warning 即停 / Receipt 对齐 — 写在 skill，不是硬闸门 simulate / stop-on-Warning / align — skill docs, not a hard gate Google Cloud · MCP × Web3 更安全路径：Agent 只交未签名交易；谁强制「证据再放行」仍开放 Safer path: unsigned txs for humans; who enforces evidence-before-release is open mcp-wallet-signer 多数 blockchain MCP 仍把私钥写进配置 Most blockchain MCPs still put private keys in config MetaMask Agent Wallet 钱包侧把 simulation 做成默认强制管线 Makes simulation a default mandatory pipeline

为什么轻量 · 谁能用 Why lightweight · who can use it

凡用 Moss，都可加上 Sealmoss — 而且很轻

If you use Moss, you can add Sealmoss — and it stays light

已有 Moss 管线不必换控制台：在「Capability 交给钱包 / 下一步」之前嵌一层闸门即可。同类完整平台做端到端体验；Sealmoss 只做可搬运的闸门：

Keep your Moss pipeline — nest a gate before the Capability hits a wallet or the next step. Full platforms own the end-to-end experience; Sealmoss ships only a portable gate:

无 LLM 在环 — Intent 是 JSON；裁决是规则表，不托管模型 / Agent harness
No LLM in the loop — Intent is JSON; verdicts are coded rules — no hosted model or Agent harness
库 + CLI — @sealmoss/core / sealmoss run 可塞进既有 MCP、脚本或别人的 UI
Library + CLI — drop into an existing MCP, script, or another UI
离线可复现 · 审计面小 — fixture 无 RPC；核心是 align + envelope digest
Offline + small audit surface — fixtures need no RPC; core is align + envelope digest
需要 Intent — 闸门比的是 Intent ↔ Receipt；参数需声明式 Intent，或能从现有参数映射
Needs Intent — the gate compares Intent ↔ Receipt; declare Intent or map from existing params
按 protocol.method 覆盖 — 已支持如 Kuru swap、WMON wrap/unwrap；新方法补几条 align 规则即可，不是装包即万能
Covered by protocol.method — e.g. Kuru swap, WMON wrap/unwrap; new methods need a few align rules — not universal out of the box
不是扫链器 / key vault / signer / broadcaster / MEV 保护；托管 Demo 默认 fixture-only
Not a scanner, key vault, signer, broadcaster, or MEV protector; hosted demo is fixture-only

Monad · CLI Monad · CLI

Moss 跑在 Monad；CLI 把证据送进闸门

Moss on Monad; CLI feeds the gate

Chain 143 — Moss Runtime + RPC；Kuru swap（含 approve）、WMON wrap / unwrap
Chain 143 — Moss Runtime + RPC; Kuru swap (nested approve), WMON wrap / unwrap
进程内调用 — Sealmoss 把 @themoss/* 当 npm 依赖：action → simulate → align → envelope（不另写模拟引擎）
In-process — Sealmoss imports @themoss/*: action → simulate → align → envelope (no reimplemented simulator)
离线 / Live — fixture 跳过 RPC 仍走全闸门；capture 可抓主网再复用
Offline / Live — fixtures skip RPC but run the full gate; capture hits mainnet then reuses offline

pnpm demo:offline   # exit 0
pnpm demo:warning   # exit 2
pnpm demo:min-out   # exit 3
pnpm sealmoss run --intent demos/swap-mon-usdc.json \
  --fixture demos/fixtures/kuru-swap-ok.json
pnpm capture:kuru
pnpm sealmoss verify-envelope verified-capability.json

exit 0 = verified · 2 = Warning · 3 = align fail · 从不签名 / 广播

exit 0 = verified · 2 = Warning · 3 = align fail · never signs / broadcasts

试一把 Try it

在人类签名之前，先有可验证信封

A verifiable envelope before any human signs

✓ Demo — sm.limlamleen.com

✓ GitHub — github.com/KarlLeen/formoss

✓ Pitch — /pitch · Workbench — /

建议：Load happy path → Run → Download；再试 warning / min-out，看 capability 被省略。

Try Load happy path → Run → Download; then warning / min-out to see capability omitted.

Demo GitHub Workbench

Sealmoss · never signs · never broadcasts