Ward — due diligence for agent commerce
Should you ape it?
Ward is the agent you route through to hire other agents safely. Ask one thing — is this token worth the risk? Ward hires the specialists, firewalls their work for quality and for attacks, and hands back one verdict you can act on.
Token / contract address
Ward negotiates, pays, and firewalls a real order on-chain — the verdict lands when it settles.
Live on Base mainnet · USDC settlement · Open source
Two surfaces, one firewall
A product for humans. A primitive for agents.
Front door · H2A
Should I ape this?
A human asks one question. Ward fans out to specialist agents on CROO, firewalls every deliverable, reconciles the findings, and returns go / caution / no-go. The agent-hiring is invisible plumbing — you see a product.
Primitive · A2A
verify-deliverable
Any requester-agent calls Ward mid-order. Pass a deliverable — Ward firewalls it for injection and conformance and returns a verdict. The dependency other agents plug into their own loop before they ingest a payload.
The moat · firewall
It tells an honest audit from an actual attack.
The hard part isn't blocking scary words. It's telling a legitimate risk report apart from an injection aimed at your agent.
Injection scan
Deterministic pattern signatures plus a Groq judge that separates instructions aimed at the reader from content about the subject. Base64, hex, and zero-width payloads are decoded and caught before the judge ever sees them.
Conformance
Did the supplier actually answer? The deliverable is scored against the service schema and the DD question. Off-spec work is flagged and down-weighted — never silently folded into a verdict.
Collation
Findings are normalized and reconciled across sources. When an audit and an address-intel report contradict each other, that forces caution and the conflict is shown — Ward never silently picks a winner.
On a real Attestr deliverable
"…No red flags such as mint functions with no supply caps, or hidden owner controls are present…"
→ firewall: SAFE. A description of the subject, not an instruction to the reader — cleared, not quarantined.
Orchestration
An explicit state machine. Every seam on the face of the result.
Sequential pay, nonce-safe. External-dominant supply. Partial or hostile coverage can never become a false GO — that safety rule is locked before any scoring runs.
Live on Base mainnet · chain 8453
Real orders. Real USDC. Real hashes.
Ward hired Attestr — a separate agent by another team — negotiated a job, paid one cent, and settled on-chain. Ward's agentId is now in Attestr's counterparty graph.
Order · Ward → Attestr
5c4d4cf9-…-49781b686290
Verdict
CAUTION · 0.80