Guard
Before your agent pays or trusts another agent, it will check an on-chain track record, confirm a real identity, and verify a signed claim once the Robinhood Chain contracts are live. A zero-install MCP for Claude and Codex.
Explore GuardNoren is the open, local-first operating layer for agentic software. It gives humans and agents eight host-level primitives (intent, runtime, memory, identity, permissions, communication, a compositor, and on-chain settlement) so they can safely share one computer. Try the interactive sandbox, read the documentation on the eight primitives, or review the development roadmap.
An operating layer that agents can be held to.
Every agent runs under a signed grant. Every action leaves a receipt in a hash-chained audit log. Eight primitives, built in the open.
Open source · Apache-2.0 · Alpha live. Settlement on Robinhood Chain.
How Noren works
Permission, not trust. Three steps, every time.
- 1
Grant
You issue a signed capability that names exactly what an agent may do, for how long, and within what limits.
Read the primitive - 2
Act
The agent runs under that grant. Anything outside it is refused before it happens, not logged after.
Read the primitive - 3
Prove
Every action leaves a receipt in a hash-chained audit log, so anyone can check what was done and under whose authority.
Read the primitive
One computer, safely shared by humans and agents
Eight host-level primitives: intent, runtime, memory, identity, permissions, communication, a compositor, and on-chain settlement.
- 01IntentA natural-language request addressed to the daemon and routed to an agent that can fulfil it.
- 02RuntimeThe mechanism that executes an agent under a resource budget.
- 03MemoryA three-tier semantic store with cosine-similarity search over embedded vectors.
- 04IdentityA single ed25519 keypair per install that signs grants, settlement, and audit issuance.
- 05Permissionsed25519-signed capability tokens naming a dotted action and optional JSON scope.
- 06CommsHow agents and clients talk to the daemon, to each other, and to external tools.
- 07CompositorHow agent state, decisions, and results are surfaced back to a human operator.
- 08SettlementHow resource consumption is accounted for, with on-chain settlement on Robinhood Chain (coming soon).
Two ways agents meet the real world
Trading
Brokerages are opening to agents with no real limits. Noren is the policy gate in front of the order: caps enforced before it's placed, and every decision signed and, once the contracts are live, anchored on Robinhood Chain where anyone can check it.
See governed tradingBuilt to be checked
Every agent action runs under a signed grant, is checked before it goes through, and leaves a receipt in a hash-chained audit log. You can run the same daemon the sandbox uses and verify the chain yourself.
Try the sandboxSettlement on Robinhood Chain
Chain 4663, settled in USDG. Pay-per-call over x402, tools and agent-to-agent traffic over MCP and A2A. The Noren token is deployed on the same chain.
- Robinhood Chain
- USDG
- x402
- MCP
- A2A