Automation Safety

The public agent surface is designed to fail closed.

Read-only means read-only

The current terminal, SDK, and MCP release cannot prepare, sign, or submit a transaction. It needs no wallet material.

Quote discipline

1. Discover the live capability before using it.
2. Use atomic units for money.
3. Bind the response to the requested market, side, and input.
4. Check the server-derived lifetime.
5. Account for both labelled fee fields.
6. Respect the returned minimum output.
7. Request a fresh quote after expiry or any retryable failure.

The official SDKs perform these structural checks automatically. Your application remains responsible for deciding whether the economics meet its own policy.

Future trade permissions

When authenticated trade capabilities launch, preparation and submission will be separate permissions. Submission will require an explicit policy, bounded limits, and an auditable approval path. Disabling a capability in Strata's control plane will remove it from connected agent surfaces without requiring a client update.

Never paste a wallet seed phrase or private key into an agent prompt. Strata's public read operations do not need one.