Warden

Telegram-native DeFi guardian for Velocity Protocol SOL-PERP on Solana Devnet, built on stock ZeroClaw (Tier 1 — no plugins).

Public multi-user beta: anyone can /start, prove wallet ownership, sign setup themselves, and receive isolated defensive proposals. Warden never holds a Solana private key.

Venue: Velocity (vELoC1audYbSYVRXn1vPaV8Axoa9oU6BYmNGZZBDZ1P). Legacy Drift is paused.

V1 policy

Lock	Value
Network	Solana Devnet only
Market	SOL-PERP only
Build tier	Tier 1 — stock ZeroClaw + HTTP sidecars
Custody	T1 Build — agent proposes; user wallet signs
Keys	No Solana private key in ZeroClaw or Warden server processes
Access	Public Telegram with ultra-locked router + orchestrator FSM

How it works

1. User /start → onboarding wizard → /setup ownership + faucet + Velocity account (wallet-signed).
2. ZeroClaw cron shell job polls risk every few minutes (fan-out per user).
3. On breach → Telegram proposal with /approve <id> / /deny <id> to that user only.
4. User approves → Review & Sign link.
5. Wallet previews and signs the defensive Velocity transaction.
6. Warden verifies on Devnet (getTransaction) and confirms in Telegram.

See docs/architecture-t1.md for the full diagram and stock ZeroClaw limits.

Layout

warden/
  services/guardrail-proxy/        # caps, allowlist, tokens, audit (firewall)
  services/velocity-read-gateway/  # reads + onboard/defend builders + wallet pages
  services/warden-orchestrator/    # multi-user store, wizard, watch fan-out
  vendor/zeroclaw/                 # stock upstream clone (gitignored)
  zeroclaw/skills/ + zeroclaw/sops/
  config/  scripts/  docs/

Quick start

cp config/.env.example config/.env   # fill secrets — see setup-runbook
bash scripts/wsl-start-velocity-read-gateway.sh
bash scripts/wsl-start-guardrail.sh
bash scripts/wsl-start-orchestrator.sh
bash scripts/wsl-zeroclaw-setup.sh
vendor/zeroclaw/target/release/zeroclaw daemon
bash scripts/wsl-phase45-tests.sh

Full steps: docs/setup-runbook.md.

Key env vars

Variable	Purpose
TELEGRAM_BOT_TOKEN	Public bot (ultra-locked ZeroClaw router)
WARDEN_PUBLIC_BASE_URL	HTTPS base for /setup and /sign
GUARDRAIL_TOKEN_SECRET	HMAC for approval tokens
ORCHESTRATOR_DB_PATH	Multi-user persistence
TOGETHER_API_KEY	ZeroClaw LLM provider
VELOCITY_OPERATOR_PUBKEY	Optional legacy bootstrap only

T1 mode does not require GATEWAY_KEYPAIR_PATH. New users onboard via Telegram /start.

Verify: bash scripts/wsl-public-multiuser-tests.sh

Docs

• docs/phasePlan.md — phased delivery
• docs/guardrail-threat-model.md
• docs/telegram-approval-gap.md
• docs/prompt-injection-transcript.md

Tests

cd services/guardrail-proxy && cargo test
bash scripts/wsl-phase45-tests.sh

Status

Public multi-user Devnet guardian cut (Telegram onboarding, watch, approve, wallet-signed defend).