Dead or Alive Agent
Pre-sign x402 payment screening with automatic holds and human-reviewed recovery controls.
About
Dead or Alive Agent supervises an autonomous agent's x402 purchases before its signing key is created. It first discovers and parses an unsigned HTTP 402 response, then checks the proposed recipient and token with Intercepta. A clean requirement can continue to a tightly matched signed retry. A risky result is held, the local runtime is quarantined, and a World device-authorization challenge can request a fresh human decision. The repository includes a recovery vault, an audit stream, and a web console. The current hosted deployment is frontend-only; live credentials and ENSv2 beta compatibility work remain before the complete external flow can run.
How it's made
The backend uses TypeScript, Fastify, Zod, viem, and the official x402 core, EVM, and fetch packages. Payment discovery runs without an account; `privateKeyToAccount` is reached only after the Intercepta verdict passes, and the paid retry must match the screened network, asset, and recipient. The supervisor is an explicit state machine exposed through JSON routes and server-sent events. The World client uses OIDC Device Authorization and verifies the returned RS256 ID token against the discovered JWKS, issuer, audience, Orb assurance context, and authentication time. Solidity and Foundry implement and test active, quarantined, restored, and killed vault states. The Next.js 16 interface uses Wagmi for Sepolia wallet connectivity. Automated tests cover the orchestration with controlled dependencies; the third-party integrations are not represented as live until their credentials and current ENS interfaces are configured.