AI trading agents with a provable track record and a private strategy, on Robinhood Chain
Robinhood launched Agents on 29 Sep 2026, and since May more than 150,000 customers have opened agentic trading accounts. Robinhood's own page says it does not control, supervise, monitor, recommend, or audit agents. Followers cannot tell which code is behind a track record, because a creator can change the strategy and keep the name. Creators cannot publish a strategy to prove it, because publishing gives it away. One trader vetted 22 viral AI trading bot posts: not one gave a wallet you could check.
The creator's agent runs inside an Intel TDX confidential VM on Phala. The strategy is sealed config inside the enclave and its SHA-256 is pinned in the measured compose, so the CVM boots only on that strategy while the chain sees only the digest. A Stylus contract on Robinhood Chain verifies the enclave's attestation quote against Intel's root certificate, onchain, in Rust, in the same transaction that admits the agent's key. The follower's AgentAccount admits exactly one measurement, trades only through the canonical Uniswap v4 PoolManager, and every TradeExecuted event names the measurement and the model hash from a verified inference receipt.
Attested trade: the admitted agent bought TSLA with USDG, and the event carries its enclave measurement and model hash: https://explorer.testnet.chain.robinhood.com/tx/0x0023f35941a1490017d220c94b41124f53b044b7416f59ea278208ee500e3b03. Refusal: a genuine TDX quote from code the follower never approved is reverted with MeasurementNotApproved: https://explorer.testnet.chain.robinhood.com/tx/0xf98156ad950c82abe4ce3ab0eac3da0ae860d1abd91fdb9eb545aa87e7e2fcc8. A CVM whose measured compose pins the strategy hash is admitted on the live account: https://explorer.testnet.chain.robinhood.com/tx/0x5fdc4acb64d8f1dddc9042c9101c652f87f7483cc1163d0c878b431c44ce965c, and Phala's attestation explorer verifies its quote.
A follower owns an AgentAccount that holds their USDG and Stock Tokens. Following approves the creator's measurement and unapproves every other one; the follower sets per-token caps, an approval threshold and allowed pools. A trade above the threshold waits as a proposal only the follower can execute. Unapproving the measurement revokes the agent in the same transaction. The account handles the ERC-8056 corporate-action multiplier, so an agent cannot trade a Stock Token while a split is pending.
The leaderboard at https://signet-agents.vercel.app re-reads every trade from the chain and groups it by measurement, so changing the code starts the record at zero. An MCP server (https://signet-agents.vercel.app/mcp) gives other agents verify_receipt, account_state, explain_refusal and get_track_record.
351 forge tests across 25 suites with fuzz and invariant tests. A mutation run deletes 123 AgentAccount guards one at a time and 122 are caught; the last is documented as equivalent. The Stylus verifiers carry 85 Rust tests, and the verifier code checks the platform TCB status, the quoting enclave identity and revocation lists. The top findings of an adversarial review are fixed with red and green tests.
Arcana proves a record was not edited, but the platform holds the keys and prompts. Hyperliquid vaults prove the PnL, not which code trades. Robinhood Agents gives limits and approvals. Phala proves a workload ran in a TEE. Signet builds on Phala and proves the code behind every trade.
Creators earn a performance fee on new profit above the follower's high-water mark; followers pay a flat subscription for an admitted agent; Signet takes a share of each. First users are named: Arcana's Season 2 board lists 40 creators and 51 agents trading US equities on Robinhood Chain. Each gets one message with the TSLA receipt attached: your next record can be a measurement, not a screenshot.
App https://signet-agents.vercel.app | Deck with Product and GTM canvases https://signet-agents.vercel.app/deck | Demo video https://signet-agents.vercel.app/demo/Signet-Demo.mp4 | Source https://github.com/aarav1656/signet
Built at Founder House from 23 Oct, 69 commits: the strategy commitment (STRATEGY_SHA256 in the measured compose, decision loop inside the CVM), the follow flow, the strategy-pinned CVM admitted on chain, the leaderboard, MCP track record tool, security review fixes, deck and canvases. Live: the app at https://signet-agents.vercel.app, the MCP server and the deck at https://signet-agents.vercel.app/deck.