The first release of Lancea: a co-signer AI agents cannot talk past, live 24/7 on XRPL testnet and Flare Coston2.
The guard. An XRP Ledger account whose SignerList is the principal (weight 2), the agent (1) and the guard (1), with quorum 2. Before the guard co-signs, it:
- asks DELICTI's
SummaMeterwhether the payment fits the umbrella's dollar budget across every rail, priced by the FTSO; - writes the reservation on Flare before the signature exists;
- reads Flare Smart Accounts instructions against the principal's policy.
An attempt is struck on-chain, and the tripwire then shuts every rail until the principal re-arms it.
The autopilot and its wheel. One step every 5 minutes, each one a guarded XRPL payment: mint, deposit into Firelight, withdraw, claim, redeem, and round again. It paces itself by the guard's gas, and the XRPL testnet faucet keeps the account topped up.
The services. lancea-guard, lancea-autopilot and lancea-feed run as user services on an Oracle Cloud Always Free machine. The feed goes out every minute to the dashboard: Lancea Watch, in clear liquid glass over a living sky. A GitHub Actions watchman reads the feed every half hour.
Proven live: the leash on DELICTI's deployed meter (6 of 6 decisions as designed), the drill (a staged hijack struck, and the re-arm), and the wheel. The runs are in docs/runs.md.
Testnets only. Unaudited. MIT.