What your agent can and can never do

Your agent acts through one key, the operator key, held by Shijima's worker. Your contract decides what that key may do. The rules are in the contract's code, which is verified on Blockscout, and nobody can change them: there is no upgrade path and no admin.

Money flow

Where your money can go

In from your wallet, round the pools and the savings vault, and out only to your wallet.

Shijima Expand

Money moves Reads or only asks Can never happen

Read it as text

1. Other chains Your wallet: bridge in (money moves)
2. Your wallet Your agent account: fund (money moves)
3. Your agent account Your wallet: withdraw (money moves)
4. Other chains Your agent account: or straight in (money moves)
5. Operator key Your agent account: trade inside limits (reads or only asks)
6. Your agent account Uniswap v3: buy · sell (money moves)
7. Your agent account Morpho vault: sweep · redeem (money moves)
8. Your agent account Anyone else: never (can never happen)

Where your money can go

Shijima

Every trade and vault move sends its output back to your agent account. Withdraw is the only way out, and the contract pays it to the owner and nobody else.

It can

• Buy and sell allowed Stock Tokens, inside your per-trade and per-day limits, through the pool you pinned, within 8% of the Chainlink price.
• Move idle cash into the savings vault and back. The money stays in your contract.
• Seal its record on the chain with a checkpoint.
• Pause your contract, for example when the loss stop fires.

Every trade's output goes back into your contract.

It can never

• Withdraw. Only your wallet, or a session key you set up, can call withdraw, and it pays only your wallet.
• Send your money anywhere else. No function in the contract takes a recipient address.
• Raise or change a limit, allow a new token, or give itself a new key.
• Unpause your contract. Only your wallet can.
• Choose a pool. You pinned each token's pool when your agent was created.
• Trade on a bad price. A dead or paused feed, or a price more than 8% off the feed, and the chain refuses.
• Trade while paused.

What the website can do

The website holds no key. It shows you screens, writes your requests into the database, and builds the transactions you sign in your own wallet. If it were broken into, it could not move a cent.

What Shijima the company can do

The same as the operator key, and no more: trade inside your limits. Shijima has no admin key over your contract, cannot upgrade it, and cannot withdraw from it.

You are always in control

Pause is a setting: it stops your agent and cancels any request waiting for your answer. Removing the assistant is on the chain, and only your wallet can restart it.