Talos is an AI treasurer whose spending ceiling lives in a contract the model cannot reach. The vault is an EIP-2535 diamond built from the builder's Lattice facet library plus two custom facets. contracts/src/facets/DecisionLedgerFacet.sol records every verdict, refusals included, as a one-shot commit(decisionHash, verdict, attemptRef). TreasuryPolicyFacet.sol lets pay() clear only against a fresh, unspent PAY commitment, inside per-tier caps, rolling daily budgets, payee allowlists and a velocity breaker, and sends anything larger to an owner-signed queue()/approveQueued(). TalosInit.sol makes the diamond its own only admin behind a 48-hour TimelockController. Tests pin the design, including test_noOtherAssetOutPath and a decision-hash vector shared with apps/web/lib/ledger/decision.ts. Off-chain, apps/web/lib/ops/vendor.ts is a reusable Gateway + x402 buyer with a quote step and per-purchase cap, lib/circleWallet.ts adds Circle Modular Wallets passkey sign-in with ERC-6492 verification and gas-sponsored recovery, and lib/bounty.ts pays merged PRs that close bounty:N issues. The reusable pieces ship separately as talos-primitives.
Smart Contract Engineer
The treasurer you can try to rob: an AI treasury operator on Arc, bounded by a Lattice diamond. Decide → commit on-chain → act.