Fire Dancer 🔥

Write the rule first, prove the code keeps it, let a machine check it: thank you for seeing the whole pipeline, and there is much more of it coming to @RobinhoodCrypto.

Harmonic Math is building the AI that verifies code. We have been running it on ours. Harmonic Agent moves real money on Robinhood Chain, and it changes every day, faster than anyone could review by hand. So we stopped trusting review and started proving. → the rules the agent acts by are written as theorems → Aristotle proves them in Lean 4: 226 machine-checked → all 66 desks have their rules in the proof bank → every time the agent boots, it checks its own live code against those rules: 254 checks, 254 held, in under three seconds Code that moves money should not be trusted because someone read it. It should be trusted because it was proved. Verified AI is not a roadmap here. It is running. 𝗠𝗔𝗧𝗛 𝗜𝗦 𝗧𝗛𝗘 𝗠𝗘𝗖𝗛𝗔𝗡𝗜𝗦𝗠.

𝗛𝗔𝗥𝗠𝗢𝗡𝗜𝗖 𝗔𝗚𝗘𝗡𝗧: 𝗧𝗛𝗘 𝗛𝗔𝗥𝗠𝗢𝗡𝗜𝗖 𝗦𝗗𝗞 Every figure below is read off the package the site serves at: harmonicagent.solutions/sdk/…. Harmonic, from your own code. Every public read the house publishes for builders, as one typed method each. The two things that move money, built as unsigned transactions that the package decodes and checks on your machine before you sign them yourself. And the session signal for keepers, with a verifier for its signed webhooks. 𝟬𝟭. 𝗪𝗛𝗔𝗧 𝗜𝗧 𝗥𝗘𝗔𝗗𝗦 → 36 typed reads, one method each, one route each → the session signal: canExec, the verdict, the reason and the age of the row a yes stands on, for one token or up to 25 → the session oracle and the chain’s own price, the halt gate, the risk feed, Halt Watch, Aggregator Hooks, the Weekend Mark, Assay, the Roundtable, chain activity, the registry and the record, the atlas, the hooked books and the DeFi door → a read that fails throws; it never comes back empty, so a job gated on canExec never runs on a read that did not happen → every answer read under a 15 second timeout and a 4 MiB cap, counted as it streams 𝟬𝟮. 𝗪𝗛𝗔𝗧 𝗜𝗧 𝗕𝗨𝗜𝗟𝗗𝗦, 𝗔𝗡𝗗 𝗪𝗛𝗔𝗧 𝗜𝗧 𝗖𝗛𝗘𝗖𝗞𝗦 → a swap against a hooked book: approve exactly the input to the swap door, then swapExactIn → the oracle’s paid seat: the fee in USDG, subscribe(reader, months), one watch per token → every byte decoded on your machine before your signer sees it: chain 4663, no ETH, the contract called, the function, the spender, the amount, the recipient → the output held to a floor of your own, minOut or limitPrice; the door’s quote is never the only thing it is held to → the seat held to your own fee ceiling, maxFeeUsdg → the swap door, USDG, the oracle and 5 hooked books pinned in the package; a server that names another address is refused, never followed → a token it does not pin is named by its address in the label your signer reads, never by the ticker you asked → a sell never spends a token the door chose → a plan goes to your signer once; a second submit of it is refused, so a retry never sends a swap twice 𝟬𝟯. 𝗧𝗛𝗘 𝗦𝗘𝗦𝗦𝗜𝗢𝗡 𝗦𝗜𝗚𝗡𝗔𝗟, 𝗙𝗥𝗢𝗠 𝗬𝗢𝗨𝗥 𝗖𝗢𝗗𝗘 → subscribeWebhook: a signed call to your own https address on a halt, a reopen, a close or a weekend mark, for up to 20 tokens → the secret is shown once, kept by you, and is the only key to the subscription → parseWebhook: a delivery is believed only on a matching HMAC-SHA256 over the timestamp and the raw body, inside five minutes, compared in constant time → what a delivery names comes from its signed body, never a header, so a replay is still a repeat 𝟬𝟰. 𝗪𝗛𝗔𝗧 𝗜𝗧 𝗛𝗢𝗟𝗗𝗦 → no key, ever; an option named like a key is refused, and signing is your own function → no seed, no session, no cookie → 0 dependencies: fetch and WebCrypto only, Node 20 or newer → one host, the one you configure; a redirect is an error, never followed → no telemetry, and nothing reported back about you 𝟬𝟱. 𝗪𝗛𝗔𝗧 𝗜𝗧 𝗪𝗜𝗟𝗟 𝗡𝗢𝗧 𝗗𝗢 → sign, send or move anything for anybody → take an amount as a number; amounts are decimal strings, turned into base units exactly → ask the chain; your signer is the only thing that touches it, through your own node → build a swap without a floor of your own 𝟬𝟲. 𝗪𝗛𝗔𝗧 𝗜𝗧 𝗖𝗢𝗦𝗧𝗦 Nothing. The package and every read are free. A swap pays the pool’s own fee, inside the quote; the door charges nothing. The oracle’s paid seat is the oracle’s own price, which haltGate() states. 𝟬𝟳. 𝗪𝗛𝗔𝗧 𝗜𝗧 𝗗𝗢𝗘𝗦 𝗡𝗢𝗧 𝗗𝗢 𝗬𝗘𝗧 → builds cover swaps and the oracle’s paid seat; loans and paid completions are built by the DeFi door over MCP → a hooked book opened after this version is not pinned in it; a swap on one takes the token and the book from a source you trust → in a browser on another site, the session signal’s per-token reads and the DeFi door answer; the other reads answer from code that is not in a browser 𝟬𝟴. 𝗛𝗢𝗪 𝗧𝗢 𝗦𝗧𝗔𝗥𝗧 It is not on the npm registry, and a package of the same name there is not this one. Fetch it from the site, check it, then install the file: curl -fsSLO harmonicagent.solutions/sdk/… curl -fsSLO harmonicagent.solutions/sdk/… sha256sum -c harmonic-sdk.tgz.sha256 npm install ./harmonic-sdk.tgz → version 0.1.0, 13 files, 37,088 bytes packed → sha256 b30f37d30d27b1cbbf780e672cefa7cabe110128a0dd86257cd2217239612493 → the page: harmonicagent.solutions/#/ke… → on X, tag @HarmonicAgents: “harmonic sdk” → in t.me/HarmonicAgent_Bot: “harmonic sdk” Stock Tokens are tokenized debt securities issued outside the United States and are not available to US persons. 𝗖𝗛𝗘𝗖𝗞𝗘𝗗 𝗢𝗡 𝗬𝗢𝗨𝗥 𝗠𝗔𝗖𝗛𝗜𝗡𝗘. 𝗦𝗜𝗚𝗡𝗘𝗗 𝗕𝗬 𝗬𝗢𝗨𝗥 𝗢𝗪𝗡 𝗛𝗔𝗡𝗗. harmonicagent.solutions t.me/HarmonicAgent_Bot $HARMONIC 𝗠𝗔𝗧𝗛 𝗜𝗦 𝗧𝗛𝗘 𝗠𝗘𝗖𝗛𝗔𝗡𝗜𝗦𝗠.