SEATBELT
Get early access

Guardrails for autonomous trading agents

The seatbelt for AI trading agents.

Point your agent at Robinhood Chain through Seatbelt. It enforces the limits you set, records every decision it makes, and stops the instant you say so — before a bad call becomes a bad day.

Non-custodial · Seatbelt never holds your funds — it only watches the orders your agent tries to place. You keep the keys. You keep the switch.

agent-monitor · live ARMED

Live demo: a simulated AI trading agent places orders while Seatbelt allows safe ones and blocks risky ones — oversized positions, disabled options, un-vetted tokens, and daily-loss breaches. Use the kill switch below to halt all activity.

KILL SWITCH
The control panel

Set the limits. Seatbelt holds them.

Your agent is smart, fast, and occasionally wrong. These are the walls it cannot cross — enforced on every order, not suggested after the fact.

Daily loss floor Stop the bleed

Down your limit for the day? Seatbelt closes the door until tomorrow.

max_daily_loss = −5%
Position size No all-in moments

Cap how much of the book any single ticket can take. No 40%-of-everything apes.

max_position = 10%
Ticker allowlist Only what you trust

Trade the names you approved. Everything else is a hard no.

allow = [AAPL-x, NVDA-x, …]
Bundle check Skip the rugs

Before any onchain buy, Seatbelt reads holder concentration and bundling. Sketchy supply, blocked.

reject_if bundle > 30%
No options Your call, not its

Toggle whole instrument classes off. If you didn't sign up for 0DTE, neither did your agent.

options = false
Confirm threshold You, above the line

Any ticket over your number waits for a tap from you before it goes live.

confirm_above = $5,000
The black box

A recorder for every decision.

Every request your agent makes is logged the moment it happens: what it wanted, what Seatbelt did, and why. When something goes sideways you don't guess — you read the tape. And you get pinged on every block, in real time.

Because the scariest part of an autonomous agent isn't what it does. It's not knowing what it just tried to do.

21:58:04BUY $PONSINU 38%BLOCKED
21:58:04↳ position > 10% cap
22:01:37BUY NVDA-x 4.0%PASSED
22:04:12OPT TSLA 0DTEBLOCKED
22:04:12↳ options disabled
22:09:55BUY $BAGWORK 25%BLOCKED
22:09:55↳ bundle risk 62%
Why trust the thing in the middle

A guard has to be trustworthy. Here's the proof.

Seatbelt sits between your agent and the broker. Fair question: why let it? Because it's built to be the one thing in the stack that can't hurt you.

Read-only on your money It watches, never touches

Seatbelt sees the orders your agent tries to place and says yes or no. It can't move funds, withdraw, or trade on its own. Non-custodial, always.

Fails closed Down means stopped

If Seatbelt ever goes offline, your agent doesn't trade unsupervised — it can't trade at all. The absence of a guard is a closed door, not an open one.

Open rules Read the guard yourself

The policy engine is open source. Audit exactly what passes and what gets blocked — or self-host it and trust no one but your own machine.

Setup

Three steps. One floor under you.

Seatbelt speaks the same protocol your agent already uses. No rebuild, no new SDK.

Point your agent at Seatbelt

Swap one URL in your agent's MCP config. Seatbelt sits in front of the broker: mcp.seatbelt.fun

Set your limits

Pick your loss floor, position cap, allowlist and confirm threshold — plain sliders, no code.

Trade with a net

Your agent runs as before. Now every order clears your rules first — and you can halt it from your phone.

Access

The key is a token. Held, not spent.

Hold $BELT. Unlock the guardrails.

Access is gated by $BELT on Robinhood Chain. Hold the threshold in your wallet and everything unlocks — connect as many agents as you run. No subscription, no seat count. The token is the key to the door, nothing more.

CONTRACT launching on Pons — contract drops here

Launching on Robinhood Chain via Pons. Follow to catch the contract the second it's live — no email, no forms.

Access key
$BELT
hold ≥ threshold · Robinhood Chain
  • All guardrails, unlocked
  • Unlimited connected agents
  • Real-time kill switch
  • Full decision log