Mandate Network
Autonomous AI keeps infrastructure alive with bounded USDC spending and human escalation.
Demo
About
Mandate gives autonomous AI agents bounded economic authority to keep real services online. In our demo, we deliberately break first-party infrastructure and let the agent recover it on its own: it detects the failure, evaluates available providers using live cost and reputation data, spends USDC to activate a fallback, reroutes traffic, verifies recovery, and stops paying when the original service is healthy again. The agent is not simply given a wallet. It operates under a mandate defining its budget, acceptable providers, operating constraints, and escalation rules. If a recovery requires more authority than it has, Mandate stops before funds move and requires a human to approve the escalation. Every major step is real and independently verifiable: the infrastructure faults affect actual HTTP callers, provider reputation comes from live onchain data, recovery payments are submitted on Arc Testnet, and the agent’s decisions can be traced through the system. Mandate is a closed-loop control system for autonomous AI: observe, decide, spend, verify, recover, and escalate only when necessary.
How it's made
Mandate is built as an Expo Router / React Native Web application with server API routes and Cloudflare D1 for shared infrastructure-health and fault state. A continuous autonomous loop combines health polling with the agent's own heartbeat, so it can detect failures even when nobody has the Mission Control dashboard open. Fault injection happens server-side through a shared wrapper, meaning a 503, latency spike, or timeout affects real HTTP callers rather than merely changing the UI. For settlement, Mandate runs on Arc Testnet with native USDC. We implemented ERC-4337 UserOperations directly with ethers.js and built our own deployed Paymaster to sponsor the agent's gas. The agent reads its real on-chain balance before acting and makes nanopayment-scale service payments—as low as $0.00004 USDC—without human intervention. Every payment resolves to a real Arcscan transaction. The Graph is load-bearing. We deployed our own subgraph indexing ERC-4337 UserOperationEvent activity on Arc and aggregate success/failure history into live provider reputation. graph-node could not decode the UserOperation calldata structure we needed, so we built a custom ABI head/tail decoder in AssemblyScript. The resulting reputation directly gates who the agent is willing to pay. We also query The Graph Gateway for live indexer freshness; excessive lag can stop a payment before signing, while the Gateway itself can become a paid liveness fallback during an outage. World ID Selfie Check defines the boundary of autonomy. If a recovery requires more money than the agent is authorized to spend, Mandate halts before moving funds and asks a real human to prove presence before authority can be increased. Cloudflare Workers additionally power our Paymaster and vendor infrastructure. The repository includes AGENTS.md, FEEDBACK.md, live verification endpoints, and reproducible commands so judges can independently verify the faults, Graph data, agent decisions, and on-chain payments instead of trusting the interface.