Onechain AI agents focus out of the lab.
Lit Protocol’s agent Stack, Vincent, now gives developers a way to send non-guardianship automation that actually affects money, but under explicit, enforceable limits that have been established by users and app authors. A launch of “Early Access” just went live, Blockworks has learned exclusively.
Lit is easy to fits the core model: policy (guardrails) and skills (discreet actions such as Swap/Leen/Brug) that are tied together in the implementation of the implementation and are enforced during Runtime, according to co-founder David Snider.
“Vincent policy (the guardrails and controls) are made and exposed by Vincent application -developers based on a certain use case,” Snider told Blockworks. “For example, a trade app can expose a ‘spending policy’ or ‘token to an absolutely policy’ that users could coordinate based on their own needs and preferences.”
Under the hood, Vincent runs on Lit’s existing “Defense-in Deph” Key Model: threshold-split tests are performed in Secure Enclaves (T-pieces) and the enclaves are only performed when an onchain policy control passes by. In practice, this means that permissions such as spending caps, situations, time windows and interest limits are evaluated before a signature or contract call occurs. An important recent improvement is how easily developers who can now pack and enforce those rules through Vincent at the time of implementation.
According to examples of a ‘starter kit’, developers can, if necessary, define and expose app -specific policy; The platform now supports both Eng Scoped and broader Smart contract permissions, with one line of SDK calls to call them up.
According to Snider, the task is to have agents act, but only within well -defined jobs.
That is effective, according to David Johnson, the main code submerge at Morpheus, who has built Lit Protocol as part of his reference Open-Source Agent Work.
“MPC makes good spending caps, whitelists or agents and limited time approvals for agents to access user funds,” Johnson told Blockworks. “These kinds of possibilities must be native to all agents,” he said, adding that it is safer to integrate enlightened instead of “rolling their own, less fight tested solutions.”
Defispecific risk roofs such as MEV protection and dealing with oracles are left to app authors. “They also have the power to define all their data sources [and] Integrations with external protocols, which can help to tackle possible limitations such as these, “Snider said, referring to aspects such as slipper hoods, flow routes for private order, RFQ chips or price stalliveness of the price. That attitude keeps the core platform minimal, while domain-specialized teams can adapt to flexibility.
Automated agents are not magic and morpheus’ Johnson notes that “all normal attack vectors and failure modes of Defi apply to agents who use Defi, so the best means to mitigate them to use L2’s who have eliminated many of these risks to prevent attacks, such as ordering attacks, such as ordering attacks, such as ordering attacks, such as ordering attacks.”
Vincent already produces success and failure signals and evidence for each implementation, but they remain locally for the developer’s app instead of being published to a broader register. The route map points to privacy -retaining certificates that can travel over registers and agent networks, so that the compliance that has been proven at one location can be trusted on another.
“The larger vision is that agents will be able to use these certificates on privacy-conservation-managed ways to shared registers such as ERC-8004 and intertagent communication protocols such as A2A to surface [Agent-to-Agent]”Snider said. Think of verifiable references (eg ‘I have helped the XYZ policy 100 times’) in an ecosystem of the shared agent, where other agents or platforms can trust them without re-auditing.
Beyond Defi
It is crucial that the agent’s landscape is expected to evolve into new use cases than pure defi -automation, to include references and APIs where real companies of life, Snider said.
“Our focus is currently on managing more secret types, such as passwords and API tests, so that agents log in to apps and we can break the current paradigm of agents who are embedded in apps,” he said. “We also continue to prepare more examples of policy and skills examples in many different chains and protocols (ie BTC and Solana), to give developers more jumping points and make it easier to start agents with Vincent.”

