RevGuard is a revocation-safety primitive for multi-hop AI-agent delegation on Arbitrum. With ERC-7710 redelegation, authority flows root → A → B → C — but nothing bounds how fast a revocation reaches every downstream link, and a compromised middle hop can refuse to pass it on. RevGuard makes revocation deterministically bounded: once you revoke, the entire subtree stops within a provable window, min(remaining TTL, heartbeat TTL, on-chain disable latency) independent of chain depth and without trusting any downstream link. It composes three layers on the audited MetaMask Delegation Framework and adds one novel contract, HeartbeatEnforcer (revoke-by-silence), that holds even under sequencer censorship.
Built end-to-end during the hackathon: (1) the novel HeartbeatEnforcer EIP-712 caveat + RevGuardLens + a minimal demo root account; (2) a 21-test adversarial suite against the real DelegationManager, covering four attacker models with zero bound violations; (3) a measured gas snapshot (~8k beforeHook); (4) a TypeScript/viem SDK and a 600-run Python proof simulator; (5) a live Next.js dashboard. Deployed all contracts to Arbitrum Sepolia and shipped a public live demo.
Pre-seed / not raised, self-funded, no external capital.