RevGuardbounded revocation for agent delegation chains

Multi-hop ERC-7710 on Arbitrum Sepolia · built on the MetaMask Delegation Framework

Delegation chain

IDLE
Rootsmart acct
authority · smart acct
0xc34d…8B85
Hop 1
sub-agent
0x3F84…396F
Hop 2
sub-agent
0x67e3…3B25
Agentyou
redeemer
Initialize to build and sign the chain.

Revocation window

WINDOW BOUND—
Bound—
Counter0
Status—

Revoke to start the race — the bar shows how long authority survives versus the 39s bound.

Heartbeat — layer (c)

Silenced
no proof

Revoke-by-silence: stop signing and the freshest proof expires within the TTL — no transaction, even under censorship.

Controls

Connect a wallet on Arbitrum Sepolia (with a deployed RevGuard) to enable actions.

On-chain event log

No events yet.

Defense layers

aFull-chain re-validation
DelegationManager

Every redemption re-checks every ancestor. Disabling the root collapses the whole subtree in O(1).

bHard TTL + bulk nonce
Timestamp + Nonce enforcers

One bumpNonce invalidates all of a delegator's outstanding delegations; the TTL is a coarse backstop.

cHeartbeat freshness (novel)
HeartbeatEnforcer

A fresh EIP-712 heartbeat is required. Stop signing and authority expires passively — even under censorship.