Rovaulta
The safety gate for robot software before it reaches the real world.
Demo
About
Rovaulta is a security gate for autonomous robot software. Before a build can be released, Rovaulta verifies the exact software against private safety policies, records a public cryptographic clearance, and uses an AI agent to prepare the deployment. The AI can investigate and prepare a release, but it cannot approve or authorize it. Sensitive safety evaluation stays confidential through Chainlink CRE, public clearance context is verified through The Graph, and high-risk authorization is protected by a human Ledger approval boundary. Rovaulta brings confidential verification, blockchain-backed release integrity, constrained AI, and human control into one deployment workflow.
How it's made
Rovaulta is built as a TypeScript/Bun monorepo with a Solidity smart-contract layer and integrates Chainlink CRE, Ethereum, The Graph, Gemini, and Ledger. Robot builds are evaluated against private safety policies inside a Chainlink Confidential Workflow using `handlerInTee`, keeping sensitive safety logic and results inside the TEE. A Solidity-based Ethereum registry records public clearance and exact bindings between the site, robot, build, and evaluation result. A custom Subgraph indexes that registry, allowing the AI deployment agent to query live blockchain state through The Graph before preparing a release. Gemini operates through tightly scoped tools: it can inspect context and prepare a deployment intent, but it cannot sign, authorize, or bypass the security model. Ledger DMK/Signer Kit and Speculos provide the human authorization boundary for high-risk actions. The system is organized as a Bun/Turbo workspace with TypeScript, Solidity/Foundry, automated tests, and end-to-end verification. The core design is simple: private rules stay private, public clearance is cryptographically anchored, AI can prepare, and a human remains in control of authorization.