non-custodialEIP-712 session grant

Delegation

Sonar is non-custodial by design: the agent acts under a scoped session approval, not custody of your funds. You connect your wallet and sign an EIP-712 grant that authorizes the agent's session key to trade a bounded set of markets up to a per-order size, until an expiry you set, revocable at any time. Sonar verifies the signature and blocks anything outside that scope at the executor.

session-key delegation

Non-custodial delegation

Sign a scoped, expiring, revocable authorization for the agent to trade on your behalf. You keep your keys; the agent can only act inside the markets and per-order size you approve, until it expires or you revoke it.

enforcement offapp-level, verified server-side

Agent session key (authority you are delegating to)

0x2b61FbdefEf22aBCc39645732a19842885f37F1c

Enforcement is at the application layer: Sonar verifies your signed grant and blocks any out-of-scope order at the executor. The SoDEX venue does not see the grant. This is a verifiable authorization design that maps onto an on-chain session-key module for mainnet.

Connect a wallet to sign a delegation. The dashboard is public and read-only; signing a grant is the only action that touches your wallet.

How it works

1. Sign. You sign an EIP-712 SessionGrant (grantor, agent session key, allowed markets, max notional per order, expiry, nonce) with your own wallet. Nothing leaves your wallet except the signature.
2. Verify + store. Sonar recovers the signer, confirms it matches you, sanity-checks the scope, and stores the grant. Re-signing replaces your prior grant; a signed revoke ends it.
3. Enforce. On every order, the executor checks for an active grant to the agent session key that covers the market and size. Out-of-scope orders are blocked before anything is placed. The risk gate (per-order and per-cycle caps) still applies on top, so effective spend is the smaller of your grant and the system caps.

Honest scope: enforcement is at the application layer. The SoDEX venue does not see or verify the grant; the signed grant is the verifiable authorization artifact. The same design maps onto an on-chain session-key module (ERC-4337 / ERC-7715 style) for mainnet, where the venue itself would enforce the scope. Enforcement is currently off (the agent trades under operator authority; flip SONAR_REQUIRE_DELEGATION to require grants).