T-BillFlow is an Arbitrum-native execution layer for autonomous AI agents managing tokenized Treasury/RWA positions. It combines cryptographically enforced agent mandates with on-chain RWA eligibility checks through an execution gate. Its core principle is “Authorization ≠ Eligibility”: an agent can have permission to act, but execution only proceeds when both the mandate and asset state satisfy protocol rules.
An Arbitrum-native execution layer for autonomous AI agents managing tokenized Treasury/RWA positions.
Enables agents to propose and execute financial actions within strict, cryptographically enforced limits.
AI agents can make autonomous financial decisions.
Traditional authorization only answers: “Is this agent allowed to act?”
It does not necessarily verify whether the underlying RWA is currently eligible for the transaction.
Authorization ≠ Eligibility
A transaction is executed only when:
The agent has valid authorization.
The requested action is within its mandate.
The underlying RWA satisfies the required state conditions.
AI Agent → Agent Mandate Registry → RWA State Oracle → Execution Gate → T-Bill Vault
AgentMandateRegistry: Defines what the agent is allowed to do.
RWAStateOracle: Tracks asset-state conditions such as NAV freshness, redemption status, and liquidity.
AgentExecutionGate: Enforces both authorization and RWA eligibility before execution.
TBillVault: Provides ERC-4626-based tokenized asset management.
Cryptographically enforced agent mandates
Transaction and cumulative spending limits
EIP-712 authorization
On-chain RWA eligibility enforcement
Selector and target restrictions
Emergency execution pause
ERC-4626 vault integration
Autonomous rule-based agent
On-chain execution verification
Deployed and tested on Arbitrum Sepolia
Smart contracts, frontend, and autonomous agent integrated
93 Solidity tests passing
23 agent tests passing
Live canExecuteAs() gate evaluation
Verified testnet transactions
Enable autonomous AI agents to manage tokenized real-world assets without giving them unrestricted financial authority.
Core principle:
The AI is autonomous. The authority is not.