ForgeOS lets AI agents act on-chain without holding your wallet keys. You grant one scoped, revocable ERC-7715 permission in MetaMask Flask. Every sub-delegation can only narrow that scope (never wide




ForgeOS is the on-chain spending firewall for autonomous AI agents.
Most agent stacks give an AI a wallet and hope for the best. ForgeOS does the opposite: you grant one scoped, revocable ERC-7715 permission in MetaMask Flask, and every sub-delegation an agent creates can only narrow in scope — never widen. One kill switch revokes the entire tree on-chain.
What it does
Activation: MetaMask Smart Accounts (ERC-7715/7710) with spend caps, allowed targets, and expiry caveats backed by verified MetaMask Delegation Framework enforcers on Sepolia
A2A coordination: 2-hop narrowing chain (Orchestrator → DeFi agent → Payment agent) with on-chain CaveatWideningNotAllowed reverts when an agent tries to expand permissions
Venice AI: Zero-retention intent parsing in the main loop, paid per call via x402 USDC on Base
1Shot relay: Gasless ERC-7710 execution with Ed25519-verified webhooks → SSE → dashboard; UI only shows “Confirmed” after a real receipt
Treasury: Per-user USDC budgets in AgentTreasury before any spend
Product surface: No-code agent builder, marketplace, delegation tree UI, system status page, and always-visible kill switch
Live demo: https://forgeagent.vercel.app
Contracts (Sepolia): OSKernel, AgentTreasury, ForgeOSRegistry — verified on Etherscan
Repo: https://github.com/Officialhomie/ForgeOS
Built for the MetaMask × 1Shot × Venice Dev Cook Off. Targets: Best Agent, Best A2A Coordination, Best x402 + ERC-7710, Best Venice AI, Best 1Shot Relayer.
Week 1 — Core primitive
Deployed OSKernel, AgentTreasury, and ForgeOSRegistry to Ethereum Sepolia
Implemented ERC-7715 activation wizard (connect → deploy kernel → scoped permission grant → fund treasury)
Built delegation encoding, proof bundles, and creation-time narrowing validation (CaveatWideningNotAllowed)
Wired 1Shot relayer_send7710Transaction with webhook verification and SSE status pipeline
Week 2 — Agent runtime & integrations
End-to-end command flow: Venice intent → action plan → 1Shot gasless relay → webhook-confirmed UI state
Auto 2-hop sub-delegation chain (500 USDC → 100 USDC / single call) without extra user signatures
Venice x402 micropayments on Base mainnet for zero-retention inference
Agent cron runner, treasury fund/withdraw, and kill-switch revokeAll path
Week 3 — Product & ship
No-code agent builder (3-step flow with enforcer-backed caveats)
Marketplace UI with install flow and registry API
Dashboard: delegation tree, spending view, subscriptions, system status (truthful red/green checks)
The Graph subgraph for delegations/registry; RPC fallback when indexing lags
Per-wallet activation persistence, stale-state recovery after contract redeploys
Production deploy to Vercel; 12/12 Foundry tests; full Next.js build (35 routes)
Submission assets: Playwright screenshot pipeline, demo scripts, and documentation (README, SUBMISSION.md, DEMO_PLAYBOOK)
Current state: Full-stack MVP live on Sepolia + Base x402. Marketplace listings are UI-complete; golden-path Etherscan evidence txs are being recorded for final submission proof.