Solana IAM Protocol

Fuin

A programmable Identity Access Management layer and restrictive wallet protocol. Cryptographic seals for AI agents and new users, operating in a secure sandbox without sacrificing custody.

Explore Protocol Launch Sandbox

Derived from Fuinjutsu — we place cryptographic seals on digital assets. We give autonomous agents and new users a restrictive environment to operate in, guided by strict owner-defined constraints.

Core Architecture

Protocol Primitives

01

On-chain Policy Engine

Comprehensive Spending, Program, Time, and Risk modules. Utilizes a Bitmask Delegate Capability Model (CAN_SWAP | CAN_STAKE) to strictly define bounds.

02

Meta-Transactions

ERC-4337 style intents on Solana. Users sign Intents while Relayers submit the transactions and pay the gas, abstracting away network complexities.

03

GasTank PDA

A dedicated Program Derived Address funded by the Guardian. The protocol automatically refunds Relayers upon successful execution of verified intents.

04

Deterministic Routing

Agents are restricted to predefined Route enums (e.g., JupiterSwap, MeteoraLP) with nonce-based replay protection to completely prevent hallucination-led exploits.

Network Participants

System Actors

Guardian
The Owner

Guardian

Creates vaults, sets strict policies, deposits gas, and retains ultimate control to freeze or rotate keys.

 Junior
The Beginner

Junior

A human operator acting under daily allowances, spending limits, and strict program whitelists.

 Agent
The Autonomous Bot

Agent

An AI operator cryptographically locked to predefined audited routes to prevent exploits driven by hallucination.

 Relayer
The Courier

Relayer

A non-custodial entity that packages and submits intents to the network, automatically receiving gas refunds.
ACTIVE Vault Initialized
SESSIONED Keys Delegated
EXECUTING Intent Processing
FROZEN Emergency Halt
Transaction Lifecycle

How It Works

01

Policy Engine

The Guardian creates a vault and sets boundaries, such as a strict $20/day limit for the designated Agent.

02

Intent Creation

The Agent receives a session key via the Bitmask Capability Model and signs an intent to execute a specific action (e.g., swapping 1 SOL for USDC).

03

Validation Routing

A Relayer submits the intent to the FuinRouter. The router verifies Ed25519 signatures, checks Pyth/Switchboard oracle prices, and enforces bitmask caps.

04

Execution

A CPI is executed to the allowlisted program (e.g., Jupiter). The GasTank refunds the Relayer, and Helius webhooks notify the Agent of success.

Start Building

Secure your
autonomous future.

Integrate Fuin into your AI products and DApps to offer users a fail-safe, non-custodial sandbox environment.

Read Documentation