Signo

DeFi never sleeps, but the people using it do. A lending position, a fixed-yield PT and an LP range each need attention for a different reason, and today the owner is the monitoring system: browser tabs, approval pop-ups, a calendar for expiries.

Signo turns a wallet into an always-on assistant. The owner describes what to watch in plain English, such as a health factor, a price or an idle balance, and picks how far the agent may go:

• Notify - the agent tells you when the condition is met

• Prepare - the agent builds the transaction for you to review and sign

• Execute - the agent acts for you, only inside a permission you signed on chain

Signo Shield is the contract layer that makes Execute safe enough to use. The owner signs one permission: which agent, which action, which asset, how much per execution and in total, until when, through which venues, and what result counts as success. The agent decides the action inside that bound; the Shield enforces the bound.

• Funds stay in the owner's wallet until a firing. The agent never holds them and never gets an allowance.

• A generic firing runs in a fresh single-use sandbox that can call only the venues the owner signed, and sweeps everything back to the owner.

• The result is measured on the owner's own balances and positions, not by parsing calldata. If it breaks the permission, the whole transaction reverts and nothing moves.

• Triggers the chain can read (Chainlink feeds, Aave health factor, balances) are checked again inside the firing. On Arbitrum the Shield also reads the sequencer uptime feed.

• The owner can revoke at any time; an enforcer can freeze an agent; venues can be suspended. No upgradeable proxies.

Deployed on Arbitrum One (verified on Sourcify):

• ShieldV1: 0xc9f83d96ee711C06dE80A532785d3BaEA966de97

• ShieldRegistryV1: 0xE0377C8C1742FCbe885E99d8d746F56eE7982f6F

• ExpressionEvaluator: 0xc428a88A92Ecec99414152Ad2A5fd4244b222B15

• GenericExecutorV1: 0xDdA03e096Eaa3AC649965B62F02007970cf22836

• AaveV3AdapterV1: 0xE6f6d73c782fb6263F04bB5966af7661b9ebE9d9

• ClaimExecutorV1: 0x9331264a9e1C0573D920cD8403031cC9761AC60A

Users set agents up in the Signo app (app.signo.fi), from any agent through Signo's MCP server (ChatGPT, Claude, OKX.AI), or inside partner surfaces (Pendle, Saffron, Aave). After every execution the agent judges the job against the owner's intent and reports what was done, what remains and why.

Status: live on Arbitrum One since 30 September 2026 and on X Layer since 24 September. 15 review passes, including passes by an external reviewer, and 500+ tests in the public repo. Not formally audited.