⚪🟢 Contour — Agent-Safe Structured Products on Robinhood Chain

Explore Contour

🎥 Demo Video: https://youtu.be/82yr6TD27Kw

🌐 Live Demo: https://contour-demo.vercel.app/

🔗 On-chain Proofs

These deployed addresses were used in the demo video and are still being used in the live demo.

• On-chain Proof List for Contracts: https://drive.google.com/file/d/1lgJvjUgCGgw6OUeo2NYmd9mrHO4SdCSG/view?usp=sharing

If you're interested to see the on-chain proofs for Investor A and B from the demo video:

• On-chain Proof List for Investor A: https://drive.google.com/file/d/1Le2yN7xks1f22Q32pTrSTJBmUwV-kNqD/view?usp=sharing

• On-chain Proof List for Investor B: https://drive.google.com/file/d/1odMsfHtb1e439wOBgU4DNSdyxen08gVs/view?usp=sharing

TL;DR

Contour is the product, policy, and agent-coordination layer for Robinhood Chain tokenized equities.

It turns tokenized AMD, AMZN, TSLA, and NFLX into collateralized structured products with market-data-derived terms, immutable onchain termsheets, IPFS-anchored disclosures, ERC-721 position tokens, oracle-priced USDG settlement, and ERC-8001-style agent coordination.

The breakthrough is agent-safe financial execution. Agents can recommend, subscribe, claim, and roll positions, but every fund-moving action must pass an EIP-712 user mandate and PolicyGuard checks for product scope, amount cap, risk limit, action permission, expiry, revocation, signature, and nonce.

Contour makes tokenized equities investable as transparent structured products while making autonomous financial agents safe enough to execute real onchain lifecycle actions.

✅ What We Shipped

Contour ships a full structured-product lifecycle on Robinhood Chain.

• 17 smart contracts covering issuance, termsheets, vaulting, position tokens, payoff math, oracle prices, disclosures, mandates, policy enforcement, agent coordination, compliance, trust, wallets, and escrow.

• Robinhood Chain Testnet deployment using tokenized AMD, AMZN, TSLA, NFLX, and USDG.

• 2 payoff templates: Buffered Upside and Reverse Convertible.

• 4 canonical products mapped to Robinhood Chain reference assets.

• Market-data-based pricing from Alpaca historical bars, deriving buffers, caps, and coupons from tenor-matched realized volatility.

• Immutable product terms stored in TermSheetRegistry.

• Collateralized USDG settlement through SubscriptionVault.

• ERC-721 position tokens with ERC-4906 metadata refresh and ERC-6454 transfer controls.

• IPFS-anchored disclosure packages with factsheets, risk disclosures, terms, methodology, and machine-readable JSON.

• Three-party activation gate: Pricing, Risk, and Disclosure attestations must exist before activation.

• Agent-safe execution using EIP-712 mandates and PolicyGuard.

• 11 onchain policy checks before an Execution Agent can move funds.

• Alchemy-sponsored execution using Modular Account v2, Gas Manager, RPC reads, and transfer history.

• Contour Auto for standing subscribe, auto-claim, and rollover inside user-signed limits.

• UI for Marketplace, Product Detail, Portfolio, Position Detail, Mandates, Activity, suitability checks, disclosures, and agent receipts.

• Backend services for pricing, factsheets, suitability, mandates, oracle relay, lifecycle scheduling, activity streams, and auto-subscribe.

• Standards coverage: EIP-712, ERC-1271, EIP-5267, ERC-721, ERC-4337, ERC-8001 agent coordination, plus ERC-3525 / ERC-7540 / ERC-7821 structured-product and agent execution patterns.

• Foundry tests covering payoff math, collateralization, activation gates, subscribe-settle-claim lifecycle, mandate enforcement, revoked mandates, cumulative spend tracking, suitability profile freezes, ERC-8001 coordination, sandboxed agent execution, and real USDG fork flow.

🎯 The Problem

Robinhood Chain brings tokenized stocks onchain, but a tokenized stock by itself is still only a spot asset.

It does not automatically provide maturity dates, payoff formulas, downside buffers, coupons, collateral requirements, disclosures, suitability checks, position accounting, or settlement rules.

Financial agents create a second problem. Most agent flows depend on broad wallet permissions or offchain promises. That is not acceptable for financial execution.

Contour solves both problems: it turns tokenized equities into transparent structured products and makes agent authority explicit, signed, revocable, and enforced onchain.

🧩 How Contour Works

Contour turns tokenized equities into structured products through one verifiable lifecycle:

market data → derived terms → immutable termsheet → IPFS disclosure → activation attestations → collateralized subscription → policy-checked agent execution → oracle-priced settlement → claimable USDG → audit receipts

First, the Pricing Service reads Alpaca historical bars and derives product economics from realized volatility. Buffered Upside products receive a buffer and cap. Reverse Convertible products receive a coupon.

ContourIssuer creates the product on Robinhood Chain, and TermSheetRegistry freezes the product terms. The Disclosure Service generates the factsheet package, pins it to IPFS, and anchors the hash through DisclosureAnchor.

Before a product can activate, AgentCoordinationModule requires three attestations: Pricing, Risk, and Disclosure. The issuer also funds the maximum payout requirement in SubscriptionVault. If collateral, oracle readiness, or attestations are missing, activation fails.

Users can subscribe directly from a product page or through a Suitability Agent recommendation. In both cases, suitability is checked first. Then the user signs an EIP-712 mandate defining what the Execution Agent can do: product, amount cap, risk limit, allowed action, validity window, and nonce.

The Execution Agent broadcasts subscribeWithMandate through Alchemy sponsorship. PolicyGuard validates the agent, mandate, amount, product risk, action type, expiry, revocation state, signature, and nonce before the vault accepts the subscription. If the agent exceeds the user’s signed policy, the transaction reverts.

At maturity, the Oracle Relay pushes the final price into ReferencePriceOracle. PayoffEngine calculates the payout, SubscriptionVault settles in USDG, and the user claims. If Contour Auto is enabled, the Execution Agent can auto-claim and roll eligible proceeds into the next suitable product, but only inside the standing mandate.

Every major step creates an audit trail: pricing receipts, suitability receipts, disclosures, oracle receipts, activation attestations, execution receipts, settlement reports, and activity events.

👤 How Users Use Contour

Users can enter products in two ways.

Product-page execution:

A user opens a listed product, enters an amount, and the Suitability Agent checks their constraints, portfolio concentration, risk limit, and product fit. If suitable, the user signs an EIP-712 mandate for the Execution Agent. The agent broadcasts subscribeWithMandate through Alchemy sponsorship, PolicyGuard validates the mandate onchain, and the user receives an ERC-721 structured-product position.

Recommendation-triggered execution:

The Suitability Agent can also select a live product that fits the user’s saved profile. The user clicks Auto-Allocate, the backend records the Suitability → Execution handoff, and the Execution Agent uses the active mandate to execute without another wallet popup. A valid suitability receipt for the same wallet, product, and amount is required before broadcast.

Contour Auto:

Users can sign a standing mandate with a notional cap, risk limit, action mask, and expiry. Within those limits, the Execution Agent can subscribe, auto-claim matured USDG, and roll eligible proceeds into the next suitable product. Users can revoke the mandate onchain at any time.

🤖 Agent-Safe Execution

Contour separates advice from authority.

The Suitability Agent checks whether a product fits the user’s risk profile, concentration limits, portfolio, and requested notional. It can recommend, but it cannot move funds.

The Execution Agent can broadcast subscriptions, claims, and rollovers, but only inside a user-signed mandate.

The Risk Agent validates product terms before activation.

PolicyGuard enforces the mandate directly in the contract. It checks:

• agent registration

• agent active status

• agent verification

• mandate revocation state

• mandate freeze state

• valid-after time

• valid-until expiry

• allowed action

• max notional

• product risk limit

• signature and nonce validity

If an agent tries to subscribe above the signed cap, act after expiry, use the wrong action type, or enter a product outside the user’s risk limit, the transaction reverts.

📈 Product Templates

Contour currently supports two structured-product templates.

Buffered Upside

Buffered Upside gives users capped upside with downside protection.

Users participate in gains up to a cap. Losses inside the buffer do not reduce principal. Losses beyond the buffer reduce principal only after the protected zone is exhausted.

Reverse Convertible

Reverse Convertible gives users a fixed coupon in exchange for downside exposure.

If the reference asset finishes at or above its initial price, the user receives principal plus coupon. If it finishes below the initial price, principal falls with the asset, while the coupon offsets part of the loss.

Both templates share the same registry, vault, oracle, disclosure, position-token, and settlement infrastructure.

⚡ Why Robinhood Chain?

Robinhood Chain provides tokenized financial assets.

Contour makes those assets programmable.

Each product references an actual Robinhood Chain tokenized-equity contract, then adds structured payoff logic, immutable termsheets, disclosure anchoring, collateral requirements, oracle lifecycle, ERC-721 positions with ERC-4906 metadata refresh and ERC-6454 transfer controls, and USDG settlement.

Robinhood tokenizes the asset. Contour turns it into a product.

🔐 Alchemy Integration

Alchemy powers the execution layer without weakening the trust model.

• Gas Manager sponsors mandate-authorized Execution Agent transactions.

• Modular Account v2 powers dedicated smart accounts for the Execution Agent and Oracle Relay.

• Alchemy RPC supports marketplace, portfolio, mandate, and lifecycle reads.

• Alchemy transfer history powers the unified activity feed.

From the user’s perspective, execution becomes simple: approve USDG once, sign a scoped mandate, and let the agent execute within contract-enforced limits.

From the protocol’s perspective, nothing is trusted unless PolicyGuard approves it.

📄 Disclosures and Auditability

Every product generates a five-part disclosure package:

• product factsheet

• risk disclosure

• terms and conditions

• pricing methodology

• machine-readable JSON

The package is generated from actual onchain product terms, pinned to IPFS, and anchored through DisclosureAnchor.

Anyone can fetch the disclosure, recompute the hash, and verify that it matches the onchain record.

At maturity, Contour generates and anchors a settlement report using the same pattern. Pricing receipts, suitability receipts, oracle updates, activation attestations, execution receipts, and settlement reports all become part of the audit trail.

🪪 Standards

Contour uses:

• EIP-712 for mandates, suitability profiles, and coordination intents.

• ERC-1271 for smart-wallet signatures.

• EIP-5267 for typed-data domain discovery.

• ERC-721 for structured-product positions.

• ERC-4906 for metadata refresh.

• ERC-6454 for transferability checks.

• ERC-4337 through Alchemy smart accounts and sponsored UserOperations.

• ERC-8001-style coordination for agent attestations and multi-party activation.

• ERC-3525 / ERC-7540 / ERC-7821 for product-slot accounting, async lifecycle flows, and constrained agent-wallet execution.

🛣️ Roadmap

Current Progress

Contour already ships the core structured-product lifecycle: product issuance, immutable termsheets, USDG subscriptions, collateralized vaulting, ERC-721 position tokens with ERC-4906 metadata refresh and ERC-6454 transfer controls, oracle-priced settlement, IPFS-anchored disclosures, suitability checks, EIP-712 mandates, PolicyGuard enforcement, Alchemy-sponsored execution, and Contour Auto for bounded subscribe, auto-claim, and rollover.

Milestone 1: Deeper Reference Shelves

Expand beyond the shipped AMD, AMZN, TSLA, and NFLX products into broader Robinhood Chain tokenized-equity shelves with more maturities, payoff profiles, and issuer-configurable product parameters.

Milestone 2: More Payoff Families

Extend the current Buffered Upside and Reverse Convertible templates into additional structured-product families, including principal-protected products, yield-enhanced range products, autocallable-style products, and multi-asset basket products.

Milestone 3: Open Agent Network

Turn agent onboarding into a market primitive: third-party agents can be verified, scored, permissioned, and coordinated through Contour's agent registries while still being constrained by user mandates and onchain policy.

Milestone 4: Secondary Market Rails

Unlock servicing beyond minting with position splitting, RFQ exits, issuer dashboards, and market-maker quote rails for structured-product positions.

🌍 Vision

Contour’s long-term vision is to become the programmable structured-product layer for tokenized markets.

Any tokenized asset on Robinhood Chain can become the reference asset for a defined-outcome product. Users get clear disclosures, funded collateral, revocable mandates, sponsored execution, constrained agents, and deterministic settlement.

Contour makes tokenized assets structured, auditable, programmable, and safe for agent-serviced financial workflows.