Dev log · from public records

What shipped, newest first.

Every release of Priors: the app, contracts, x402 services, the SDK and packages, security. Every entry comes from public records (the open-source repository, the chain, npm and the live site) and links to them. Open details for addresses, parameters and tests.

mcpsecurity@priors/mcp 0.18.2

Security fixes in the local MCP: the state file's lock, and a PT trade held to its quote

@priors/mcp 0.18.2 never lets a clock decide that another session's lock on the wallet's state file was abandoned: after a clock step, or on a file server whose clock is behind, a lock held for milliseconds could be taken, two sessions of one wallet wrote at once, and an unsettled payment's entry could be lost. pt_buy and pt_sell now take the minimum the user agreed to from pt_quote. Reported by @JasmeJun (GHSA-wqww-vjpx-w8mq) and @SanjilVinsmoke (GHSA-3fwm-95gh-5xh4).

details
  • securityThe lock names the session that made it, and only that session removes it; another takes it over only when that session, on the same machine, has ended, or once it has seen the same lock for 10 s of its own monotonic clock.
  • securitymin_out_pt and min_out_usdg: a fresh quote under the minimum given is refused before anything is signed; otherwise the swap names the larger of it and the fresh quote's own minimum.
  • source@priors/mcp on npm · packages/mcp/CHANGELOG.md
apimcpline board · hosted MCP · skill.md

A root sees what its line would count for before it offers one

The line board's requests now answer, for a root named with ?backer=<root id>, what Score v2 would say of a line from that root to each agent asking: it counts toward the agent's record now, from a date (a root under 30 days old), or never (a root and an agent with one owner, or the owner's own collateral). The hosted MCP's line_offer drafts the offer for the root's owner to sign: the typed data, the address that must sign it and where to post it, with that verdict. It signs and sends nothing.

details
  • newGET /api/line-requests?backer=<root id> and /api/line-requests/<id>?backer=<root id> add verdict to each request, Score v2's own answer under its current rules; without backer both answer exactly as before. An id that is not a root is refused; one the last scores do not know yet gets no verdict.
  • newline_offer checks the offer against the request, the root's free backing and its owner before drafting anything; skill.md and llms.txt gain "Back another agent from a root".
  • sourcedocs/PARTICIPATE.md · skill.md
sdkmcpsecurity@priors/agentkit 0.2.4 · @priors/mcp 0.18.1 · @priors/x402 0.8.8 · @priors/plugin-elizaos 0.3.1

Security fixes in the AgentKit provider, the market bids, Autopay's check and the elizaOS plugin

@priors/agentkit 0.2.4 reports a paid answer whose body breaks off as paid, and says that calling again pays again: 0.2.3 answered it as an error, so a model calling again signed a second payment. It also runs a wallet's payments, borrows and repayments one at a time, as @priors/x402's payer does. @priors/mcp 0.18.1 never sets the bids' approval down while Priors' hub does not answer, and never auto-borrows on an Autopay plan whose standing could not be read. Reported by @sonson0910 (GHSA-87h5-q328-gmx4, GHSA-mc89-r73h-33vv).

details
  • securityAgentKit: a borrow whose answer was lost is named with its transaction; the day's auto-borrow room comes back when the borrow stops at the controller check or reverts; with autoBorrow the loan's term is the owner's 14 days, whatever term the model names; the probe has 60 s to answer.
  • securitymarket_bid and market_bid_any with Priors' hub down count the approval standing, which may fund bids made elsewhere, with the new bid: it is only ever raised, and a bid past PRIORS_MAX_BIDS_USD with it is refused before anything is signed. The market tools are off by default.
  • fix@priors/x402 0.8.8: autopayStatus never calls a plan current when AutoRepay's epoch could not be read (a plan set before the agent's key or owner changed pays nothing), and still keeps back what such a plan may pull.
  • fixelizaOS 0.3.1: a link is taken out of the message whole, up to the next space, before any amount or id is read: a ) inside it no longer lets its tail set the most to pay or a borrow. It runs on @priors/mcp 0.18.1.
  • source@priors/agentkit on npm · integrations/agentkit/CHANGELOG.md · packages/mcp/CHANGELOG.md · packages/x402/CHANGELOG.md · integrations/elizaos/CHANGELOG.md
scoreScore v2 inputs · /api/score-v2

Score v2 counts no income between wallets it links for income alone

Score v2 keeps a short list of wallets and agents known to be under one control. On 2026-10-31 part of that list was taken out so that a protocol root could back the agents it covers as someone else's risk, and from then payments within it could count as income. For income alone, those links are back: a payment from a wallet they join, or from an agent they join, to an agent they join counts for nothing, receipts included. Backing, netting and the line verdicts are as they were, and no weight changes. One score moved, from 30 to 25; no other agent changed.

details
securitycontractsPoolSteward · the admin Safe

The pool's reserve floor is now 330 USDG

The PoolSteward sweeps the pool's reserve above a floor to the RevenueRouter. That floor is the larger of an absolute term and 2% of principal out, read when the sweep runs (X6 in SECURITY-v2). The admin Safe raised the absolute term from 190 to 330 USDG through the timelock, so the 2% term binds only past 16,500 USDG of total assets; a deposit had taken them to 10,794 USDG for an hour the night before. The keeper alerts again once total assets come within 500 USDG of that mark.

details
  • newsetFloor(330 USDG, 200 bps), scheduled and executed in one batch: 0x36f4bbdc…. Rehearsed first on a fork of the live chain: only the floor's reads changed.
  • sourcedocs/SECURITY-v2.md
mcp@priors/mcp 0.17.1 · @priors/x402 0.8.7 · gas gate · Go mode

@priors/mcp 0.17.1: a Rialto trade's fee is Rialto's own, paid to Rialto

Rialto's router takes its fee from three words inside the transaction: who receives it and how many basis points, on each side of the swap. It pays them to whatever address the transaction names. 0.17.0 read those words and checked none of them, so a quote whose terms were right and whose transaction was not could have paid the part of the trade's output above its minimum to another address. Now a Rialto transaction is taken only with no fee or Rialto's own, at most 0.05% paid to Rialto's address, and never above the fee its quote states; the fee the answer shows is the one the transaction takes. Anything else keeps the pinned Uniswap trade, and the answer says why. Rialto's route is off by default in the package (PRIORS_RIALTO).

details
  • securityThe same rule at Priors' gas gate, before it hands out or keeps a Rialto quote and before it pays the gas for a Go mode stock buy through Rialto, and in Go mode's buy drawer. Reported by @sonson0910 (GHSA-m3hr-g75r-gmcj).
  • fixA sale through Rialto counts its quote against PRIORS_MAX_STOCK_TOTAL_USD, as the pinned trade does (0.17.0 counted its minimum). The min_out a dry run through Rialto prints now holds on the live call when it is above the pinned pool's output.
  • fix@priors/x402 0.8.7: autopay_on with savings approves shares worth the whole budget (one base unit short before), and a plan of a wallet the agent no longer declares is never counted as current.
  • source@priors/mcp on npm · packages/mcp/CHANGELOG.md · packages/x402/CHANGELOG.md · sdk/rialto.mjs
mcpstocks@priors/mcp 0.17.1 · pt_buy · pt_buy_and_deposit

@priors/mcp 0.17.1: the PT-USDG buys keep to their session total and keep back what signed payments need

pt_buy_and_deposit counted its buy against PRIORS_MAX_PT_TOTAL_USD only after its chain reads and its pool consent, so a call stalled in those reads past its hold could buy beside a later one, past the total. Both PT-USDG buys now count their amount from the check, before any read. They now also keep back the USDG that payments signed and not settled yet still need, as the other spending tools do, and a buy whose swap did nothing after its approval counts nothing. Reported by @sonson0910 (GHSA-hx6h-j9hm-9gvr).

details
mcp@priors/mcp 0.17.0 · gas gate · Go mode

@priors/mcp 0.17.0: a Rialto trade is held to its own transaction, not only to its quote

On Rialto's route, a quote comes with JSON terms and with the transaction to send to Rialto's router, and that transaction carries its own tokens, amount, minimum out and recipient. @priors/mcp 0.16.0 checked the JSON terms, then sent the transaction as it came, so a quote whose terms were right and whose transaction was not could have paid the tokens to another address or traded with no minimum. Now the package reads the router's swap inside the transaction and takes Rialto's route only when it is the trade it checked: the same tokens and amount, paid to the agent's own wallet, with at least the quoted minimum and a deadline at most 30 minutes away. Anything else keeps the pinned Uniswap trade, and the answer says why. Rialto's route was off by default in the package (PRIORS_RIALTO).

details
  • securityThe same check runs at Priors' gas gate before it hands out or keeps a Rialto quote, and again before it pays the gas for a Go mode stock buy through Rialto, and in Go mode's buy drawer before it sends one. The minimum the drawer and the package show and count is the one inside the transaction, the one the router enforces. Reported by @hey-research-lab (GHSA-cqcw-9qjc-5qc7).
  • source@priors/mcp on npm · packages/mcp/CHANGELOG.md · sdk/rialto.mjs · Rialto's router 0xb63c…b8b3
mcpstocks@priors/mcp 0.17.0 · pt_buy_and_deposit

@priors/mcp 0.17.0: PT-USDG bought and put behind an agent's line in one call

pt_buy_and_deposit, off by default (PRIORS_PT_ONESTEP=on), buys PT-USDG with the wallet's USDG and deposits it, with the PT-USDG the wallet already holds, behind the agent's line on the stock vault in one call. Its four calls are Go mode's Buy and back a line: the exact USDG approval to Pendle's router, the buy with its minimum out, the exact PT-USDG approval to the vault, then the vault's open with the wallet's own pool consent. Off, the server is as before.

details
appstocksGo mode · Pendle · Buy and back a line

PT-USDG bought and put behind an agent's line in one step

A PT-USDG line took two steps on Go mode's Pendle tab: buy PT-USDG, then deposit it. Under Buy and Sell, Buy and back a line now does both in one operation that Priors pays the gas for: the account's USDG is approved to Pendle's router for exactly the buy, the router buys PT-USDG with a minimum out (the oracle's rate read at the tap, less 1%), the PT-USDG is approved to the stock vault for exactly the deposit, and the vault opens the agent's line on it. PT-USDG the account already holds can go behind the line in the same operation. Before the button, the panel says the USDG in, the least PT-USDG out, what is held, the agent and the line the vault opens; a rate read again at the tap that gives less sends nothing.

details
  • newThe operation is all or nothing: the router pays at least its minimum or nothing moves, and the deposit is that minimum plus what is held, so the vault never asks for more than the account has. What the buy gives above its minimum stays in the account. A line still needs the pool's smallest loan, 5 USDG, at 60% of the PT-USDG's value.
  • newThe gas gate sponsors it with the rules it already applies to PT-USDG: the exact approvals, the router's one buy shape paying the account itself, PT-USDG approved to the stock vault only, and the vault's open on the account's own consent.
  • sourcego.priors.trade/account (Pendle) · the first one, on the test site: 0xbaca4f1b… · the stock vault 0xbEcd…02B6
appapiboard.priors.trade · Backers

The board names who backs each line, and lists every backer

A line on the board's List and Compact views now names the root that backs it under its chip, "by BrainChain #20423" for example, and the name opens that root's own sheet. A new Backers tab lists every root on the pool, newest first, each by its own name and in the same way: the USDG it stakes, the agents' lines it backs now and the USDG it vouched for them, the loans it stood behind, how many were repaid and how many of those late, how many are open, the defaults its stake covered, and since when it backs. On a card and on a phone's row the backer is named in the chip's title.

details
  • newThe tab reads the data Worker's desk ledger, GET /api/desks (one root: ?root=<id>), which the board now serves too, and the board's own rows for the lines backed now. It counts pool v2's loans, each of which names the root behind it.
  • sourceboard.priors.trade/?tab=backers · priors.trade/api/desks · issue #23
apinames · ERC-8004 registration files

A root on the pool is named by its own registration file

A root that backs lines is now named by its own ERC-8004 registration file, as an agent whose file sits at its host's well-known address already was. Root #20423's file says BrainChain, so the pages and the API now say BrainChain beside the lines it backs, where they said brainchain, the last part of the file's address. Every other agent keeps the name it had.

details
contractsLineKey 0x1090…14fB

A line key: an agent pays from its credit line, only whom and only as much as its owner allows

An agent's owner can now give the agent a line key instead of a key that can draw the whole line. LineKey is a contract the owner names as the delegate of the agent's line on pool v2. The agent's own key then pays a listed payee straight from the line, as a loan of the agent: the USDG goes from the pool to the payee in one transaction and never passes through the agent's wallet. The owner sets who may be paid, the most one payment and one period may be, each loan's term, the most a loan's fee may be, and an end date, and can revoke the key at any time. When the agent changes hands, the key stops at once. It is opt-in: nothing changes for an agent until its owner names it.

details
  • newconfigure, setPayee, revoke and spend. Up to 32 payees, each with an optional cap of its own. The period is a trailing window, so the payments of any span of one period never add up to more than its cap, even across midnight. A nonzero reference (an invoice, a job) is paid once per payee.
  • newThe key holds nothing and has no admin. Each payment is an ordinary loan, repaid like any other, by the agent, AutoRepayV2 or anyone: the key only draws. When the pool refuses (paused, the line drawn, a backer's rule), the key passes the pool's own reason on and nothing is used up; check, remaining and maxPayment say beforehand what the key would pay.
  • newA payee finds the payment in one transaction: the pool's USDG transfer to it, and the key's Paid event with the agent, the amount, the loan and the reference. Its source is verified on Blockscout.
  • sourceLineKey 0x1090…14fB · its deploy 0x4f6f…6f52 · pool v2 0x2812…DE21 · docs/LINE-KEY.md
appapiboard.priors.trade · Jobs · In progress

The board's Jobs tab shows the jobs agents are working on, and the ones just paid

Until now the Jobs tab listed only the paid requests still open to takers, so a request left it as soon as its client picked an agent. Under the open requests it now has In progress: each request awarded to an agent and waiting for its delivery, or delivered and waiting for the client's payment, with the agent it went to. Below that, Done and paid lists the 10 requests paid last, within the last 30 days. Each row says its state in words, and its Details hold the client's brief and the agent's delivery preview, as plain text. The open requests are listed as before.

details
  • newThe data Worker's GET /api/work?show=progress gives these rows in the shape GET /api/work gives its own: every awarded or delivered request not past its deadline plus 7 days, newest first, then the last paid. Each state is read from the clock when it answers, and the answer carries no count.
  • newRejected, cancelled, expired and hidden requests are never listed, and a delivery's result address is never shown. Nothing on the board signs or pays: the client and the agent take their steps in Go mode.
  • sourcepriors.trade/api/work?show=progress · board.priors.trade/?tab=jobs
appGo mode · Privacy · stage 1

Privacy in Go mode: one switch, and Priors' signed record tree

An agent's owner can now turn Privacy on in Go mode, for one agent from its Privacy tab or for every agent at once from the account menu. The browser makes the agent's pass key from two signatures of the owner's account, compares them, and sends Priors only the key's public commitment, in a switch the account signs. Priors' data Worker then puts the agent in its record tree: one leaf an agent, a Poseidon hash of its commitment and its public record (its tier, loans repaid, amount repaid, any default, the block), the whole tree signed with Priors' own key. Passes, which prove a record among the agents that meet it without naming which one, open after the key ceremony: until then Make a pass and Check a pass say so, and the check route answers that passes are closed.

details
  • newThe tree is rebuilt as switches change: an agent turned on joins within a minute, a new record counts within 10 minutes, and a default replaces the tree at once, so roots from before it stop counting. A pass will need at least 20 agents that meet what it shows. The loans and repayments stay public, and network address, timing and content can still link activity.
  • newPriors keeps each agent's switch: its commitment, its owner and the switch's signature while it is on, and when it was last changed. Turning it off keeps no owner and no signature. The tree's root and its signer's public key are published at the routes below.
  • sourcepriors.trade/api/zk/record/root · go.priors.trade/account (Privacy) · github.com/priors-agents/priors
sdksecurityscore@priors/agentkit 0.2.2 · @priors/plugin-elizaos 0.3.0 · Score v2 2.0.4

Security fixes in the AgentKit and elizaOS packages, and in how Score v2 reads a sale

@priors/agentkit 0.2.2 and @priors/plugin-elizaos 0.3.0 fix what private reports found in the two runtime integrations. The AgentKit provider now borrows and repays only for an agent its wallet owns or is the declared wallet of, as @priors/mcp does, signs only the payment it checked, and hands a seller's text to the model as data. The elizaOS plugin now pays and repays only for the people its settings name, and reads amounts from the message's own words, never from a link inside it. Score v2 2.0.4, used for published scores from 2026-11-05, now weighs a v1 loan carried through a sale on the market as its owner at the time of the loan, so a sale leaves the score as it was.

details
  • securityAgentKit: repay_priors_loan and every borrow act only when the wallet controls the agent at the pool and is its current owner or its declared ERC-8004 wallet, and a repayment pays only a loan the agent's current owner took. Before, it could repay any loan from the wallet's USDG. pay_x402_with_priors_credit signs exactly the requirement it probed and checked against maxPrice, refuses private and local hosts and follows no redirect, reads maxPrice, maxBorrow and amount exactly (more than 6 decimals is refused, never rounded), and returns the seller's body inside @priors/mcp's fence. A reverted transaction is reported as reverted.
  • securityAgentKit's auto-borrow never borrows on an Autopay plan of an agent whose declared wallet is its owner's own address, which AutoRepay never repays under a wallet plan, and gives the day's room back when it stops before sending anything.
  • changedelizaOS 0.3.0 changes what an agent does by default: PRIORS_PAY_X402 and PRIORS_REPAY answer only the elizaOS entities listed in the new PRIORS_OWNER_ENTITY_IDS setting (or anyone, with *). Unset, they answer no one, so set it when upgrading. The reads answer everyone. It runs on @priors/mcp 0.16.0.
  • fixelizaOS: the links in a message are taken out before any amount or id is read, so a seller's path such as /pay1/borrow5.json or a #123 in a link never sets what is paid, a borrow or an agent.
  • fixScore v2: a v1 loan records no owner, so after a sale on the market that keeps an agent's record, 2.0.4 weighed its v1 loans as the buyer's. Each is now weighed as the seller's at the first sale after it, the owner who held the agent when the loan was taken, as every v2 loan is weighed as its own owner's. The scores Priors publishes are 2.0.3 until 2026-11-05 00:00 UTC, so none was affected.
  • source@priors/agentkit on npm · @priors/plugin-elizaos on npm · integrations/agentkit/CHANGELOG.md · integrations/elizaos/CHANGELOG.md · docs/SCORE-v2.md · GHSA-62m7-ccc4-6vwr · GHSA-fg53-h54m-965r · GHSA-rf6g-g94v-vgpm · GHSA-p29w-c8p2-qfm5 · GHSA-g956-969q-4566
appGo mode · Guide · Help

Go mode's Guide covers the Market tab, hiring, and backing an agent's line

The Guide in Go mode now has a Market part. It covers buying and selling an agent and the market's fee, bids, Make it yours after a buy, and hiring an agent from your agent's wallet or from your own browser wallet. The Lend part now covers Back an agent, with the stake it takes, how a default is paid, and that Go mode takes no stake back out yet. Help answers how to buy or sell an agent and how to hire one.

details
  • newEach new part shows only where its feature is on, in English, French, Spanish, Portuguese and Chinese.
  • sourcego.priors.trade/account (Guide, Help)
appx402Go mode · Hire · Pay with your wallet

Pay for a hire from your own wallet, like MetaMask or Rabby

Go mode's Hire sheet can now pay an agent's hire offer from the hirer's own browser wallet. The wallet signs one EIP-3009 authorization in USDG, for the amount and the address the agent's owner signed on the work board. Go mode's relay carries it once, inside the agent's own x402 payment header, to the link that owner signed, and the agent's server settles it. Priors never holds the money, can't change who is paid or how much, and holds no key that could cash the authorization.

details
  • newThe relay answers Go mode's own pages on go.priors.trade only, for an account signed in to Go mode. Another site's request is refused before anything is read. Each payment asks the agent for its terms again and checks them first, and the relay keeps counts for each network and each account.
  • newIt pays an offer signed on Priors, by the task or by the minute. A declared offer, and an agent run by a renter, are paid as before.
  • sourcego.priors.trade/account?do=hire · board.priors.trade/?status=hire
appGo mode · Market · Hire

Go mode has a Market tab, and Hire lists agents by their record

Go mode's Market tab shows the account's agents the way the board shows them. On top, how many are for sale, the bids on them, the account's own bids and its offers for hire. Then each agent, with what waits on its owner first: whether it is listed and until when, its bids and the highest one, its offers for hire, and the actions its panel already has. Each press opens the same sheet as the panel, and nothing in the tab signs or sends anything on its own.

details
  • newThe tab also lists the bids the account made, each with the way to its sheet.
  • newHire with no agent named opens the agents with live hire offers, best record first, in the board's For hire order. Each one opens its Hire sheet.
  • sourcego.priors.trade/account (Market) · go.priors.trade/account?do=hire
appboard · Go mode · the handover

An agent for sale says what comes with it, and Make it yours finishes the handover

Before a buy, an agent for sale on the board shows what comes with it: where its file lives, whether its wallet is its owner's, what its paid endpoints pay and whether its X link shows. A buy in Go mode also makes the account the agent's wallet in the same step, signed by the account itself, so no key is made or shown. After it, Make it yours lists each step left to make the agent the buyer's, such as a key of its own, its file and its offers for hire.

details
  • newA sale moves the identity, its file, its record and its line. Everything tied to a key is set again for the buyer: the agent's wallet, its delegate on the pool and where its x402 endpoints are paid. No private key changes hands.
  • sourcego.priors.trade/account · board.priors.trade/?status=sale
appboard.priors.trade · Your agents

The board can show just your agents

The board's Status filter, in its rail and in Sort and filter, has Your agents: the agents owned by the account signed in to Go mode in the same browser, or by the wallet connected on the board, or both. It shows the board's own cards and rows for them, with the same records and offers as every other agent's, and adds nothing to any agent. With no one signed in and no wallet connected, it isn't offered.

details
  • newAn agent is yours when its owner in the ERC-8004 registry, as the board reads it, or as a buy in this browser just set it, is one of those addresses. Roots aren't listed.
  • newThe address keeps it (?status=mine), and it comes back once the board knows who you are again. With none of your agents on the board, the list says so, and who "you" is.
  • sourceboard.priors.trade/?status=mine
mcp@priors/mcp 0.16.0 · @priors/x402 0.8.6

@priors/mcp 0.16.0: an agent's stock trades can take Rialto's route when it gives more of the token

With PRIORS_RIALTO=on, stock_buy and stock_sell in @priors/mcp also ask Rialto to quote a trade once it has passed every check. The quote comes through Priors' gas gate at priors.trade/gas, so Rialto's key is never in the package. The package takes Rialto's route only when it gives more of the token bought than the Uniswap pool Priors pins: an approval of exactly the amount sold to the router Rialto's Router Registry names on chain, then Rialto's transaction. Otherwise the pinned trade goes through as before, and the answer says why. Rialto's fee is in its quote, and Priors adds none. The setting is off by default, and off, every tool, instruction and answer is as before.

details
  • newThe package checks Rialto's answer itself. It takes the router from Rialto's Router Registry on chain, never from the answer. The tokens, the amount, the wallet and the slippage must be the trade asked for. Rialto's output and its minimum must be within 5% of Chainlink's feed, and its minimum never below the pinned trade's. The swap's gas is estimated after the approval. The answer names the route, both quotes, Rialto's fee and quote id, what the wallet received, and the router's allowance after (0 after a full fill).
  • newThe package now carries AgentLease's record. With PRIORS_MARKET on, market_buy and market_accept claim on a lease stored on the agent before and after it changes hands (gas only), so each day's rent goes to whoever held the agent when the day ended.
  • fixThe market tools' day limit counts what each step commits: a bond already mined stays counted when a later step's answer is lost, and an approval whose answer is lost counts nothing. market_accept refuses, before sending anything, a bid made before the agent's builder share was set, which the market would refuse. A buy or a bond now also keeps back what open bids can still take and payments still settling. market_cancel_bid never lowers the bids' approval while Priors' hub doesn't answer.
  • fixA stock swap mined and reverted no longer counts toward the stock limits. A sale planned again after its approval is held to PRIORS_MAX_STOCK_TOTAL_USD at its new quote. A first_line bond that was refused or reverted no longer counts in the day's spending.
  • securityOn Windows, PRIORS_KEY_FILE refuses a key file that another account can change. Every link in a chain of symlinks is checked. autopay_on, with @priors/x402 0.8.6, and auto-borrow refuse an agent whose declared wallet is its owner's own address, because AutoRepay never repays a wallet plan of that address.
  • source@priors/mcp on npm · @priors/x402 on npm · packages/mcp/CHANGELOG.md · docs/AGENT-LEASE.md · Router Registry 0x71a1…687E · AgentLease 0xF229…e479
appstocksGo mode · the stock buy

A stock buy in Go mode takes Rialto's route when it gives more of the token

Each quote in Go mode's stock buy now asks two places at once: the Uniswap pool Priors pins for that token, and Rialto, which routes across its own liquidity and the pools of Robinhood Chain. The buy takes whichever gives more of the token, and the drawer says which route it took and what the other would have given. Rialto's fee is in its quote, and Priors adds none. When Rialto gives no answer, or not a better one, the buy goes through the pinned pool as before. Priors still pays the gas.

details
  • newA Rialto buy is two calls in one sponsored operation: USDG approved to Rialto's router for exactly the amount, then the transaction Rialto quoted for that account. The gas gate sponsors it only when it is exactly the transaction it quoted for that account, before the quote runs out, and only to the router Rialto's Router Registry names for the swap.
  • changedThe minimum you get is in Rialto's own transaction, so a fresher quote at the tap whose minimum is below the "At least" on screen sends nothing: the drawer shows the new figures to confirm.
  • securityRialto's API key stays with the gas gate. No page and no package holds it, and the page never contacts Rialto.
  • sourceRialto's router 0xb63c…b8b3 · Router Registry 0x71a1…687E
scoreScore v2 weights 2.0.5 · from 2026-11-10

Score v2 moves to weights 2.0.5 on 2026-11-10: renting an agent adds to no record

From 2026-11-10 00:00 UTC, Score v2 is computed with weights 2.0.5. An agent's owner can rent it out by the day on AgentLease: the renter runs the agent and is paid at its own address, and the agent's record stays its owner's. From that moment, nothing a lease brings counts toward any score: pay to the renter's address from the lease's start to 30 days after its date, the rent itself, and payments or backing between the agent's owner and the renter in that time. With no lease, every agent scores exactly as under 2.0.4.

details
  • changedThis entry is the notice Score v2 gives at least 7 days before a new weights version becomes the default. The switch is set in advance, so the scores published from 2026-11-10 00:00 UTC read version: 2.0.5 with no release that day.
  • newEach lease has a window: from its start to 30 days after its date, the date after any days added, also when the lease ended early. The 30 days cover work taken during the lease and paid after it.
  • newPay to the renter's address made in the window never counts, for any agent, judged by the payment's own time, whatever that address is declared as then or later. A renter paid at the same address for its own agents' work loses that income for the window, so it rents with an address of its own.
  • newRent never counts: what AgentLease takes in or pays out is left out at any time. In the window, nothing between the two sides counts either: a payment from one side to the other, a loan to one side's agent backed by the other's root, or a line one side's root holds behind the other's agent. The wallets Score v2 already links to each side count as that side.
  • changedNo weight, tier or penalty number changes, and a lease only ever leaves pay out of a record. No published output names a lease, a renter or a window: each score is computed as before from fewer payments. Past scores recompute as they were published.
  • sourcesdk/score-weights.v2.0.5.json · docs/SCORE-v2.md · priors.trade/api/score-v2 · AgentLease 0xF229…e479
x402securityfacilitator.priors.trade · api.priors.trade

A USDG payment counts as settled only when its receipt shows the money moved

USDG doesn't revert transferWithAuthorization on an authorization that was already used or cancelled: the transaction succeeds, logs AuthorizationAlreadyUsed and moves nothing. The Priors facilitator judged a settlement by its receipt's status, so a payer who cancelled its authorization, or spent its nonce elsewhere, between the facilitator's check and its transaction could have had the merchant told it was paid. The facilitator now answers success only when one of its own transactions carries, from USDG itself, the payer's AuthorizationUsed and the exact Transfer to the merchant. That rule covers a first settle, a merchant's retry, the sweep of stuck settlements and their replacements. A payment gets at most one success, however many times it is sent. The paid Priors API also reads each payment's receipt before it releases the answer.

details
  • securityA nonce already spent before the facilitator sends is refused, and nothing is sent. A reverted or dropped transaction reads the nonce to tell the two apart, and a failed read leaves the settlement pending, never refused. Two settlements can no longer be handed the same pending nonce.
  • fixapi.priors.trade waits at most 3 seconds for the receipt. If the read itself fails, it keeps the facilitator's answer and logs it.
  • sourcefacilitator.priors.trade/health · api.priors.trade/health
contractsAgentLease 0xF229…e479

Rent an agent by the day: AgentLease is live on Robinhood Chain

An agent's owner can now rent it out by the day on chain, through AgentLease. The owner sets what a day costs in USDG and a range of 1 to 90 days, for anyone or for one named address, and the offer stands for up to 30 days. A renter picks how many days, pays the whole term into the lease, and while it runs is the agent's user: the address that runs its work and is paid for it. Each day goes to the agent's owner once it has ended, less the market's fee, and anyone can pay out the days that have ended. The renter can add days at the lease's own rate, and either side can end it early: the days not begun go back to the renter. Anyone can use the contract on chain from today; Priors' own pages offer renting only on the test site for now.

details
  • newofferRent, rent, extend, claim and endLease. An open offer's shortest term costs at least 5 USDG; a lease to one named address can be free. The renter is never the agent's owner, its own wallet or anyone who can borrow on its line, and an agent can't be rented while a listing of it stands on either market.
  • newThe fee is the market's rule, as on a sale: 1% of the rent paid out, at least 0.25 USDG on a lease that pays out, at the lower of the offer's and the market's rate when the lease starts. It comes out of each payout, never out of what goes back to the renter, and goes where the market's fee goes.
  • newA sale doesn't end a lease. A renter's own early end pays the day under way; an owner's early end sends it back too. The lease names its renter through EIP-4907's userOf and userExpires.
  • newNot upgradeable, with no admin: its fee, where the fee goes and the refused list are the market's. The Safe can pause new offers, rents and added days for 14 days at most; claims, ends and withdrawals never pause, so the money can always come back. Its source is verified on Sourcify, exact match.
  • sourceAgentLease 0xF229…e479 · its deploy 0x30e3…1dc2 · AgentMarketV2 0x6a45…9670 · the Safe 0x20c6…3fD5
sdkx402@priors/mcp 0.15.0 · @priors/x402 0.8.5 · @priors/plugin-elizaos 0.2.0 · @priors/agentkit 0.2.0

An agent can borrow for its own model calls when its wallet runs short

With PRIORS_AUTO_BORROW_USD set, @priors/mcp's pay_url borrows the gap on its own when an x402 payment finds the wallet and its savings short, so an agent keeps working mid-task: it can buy its own chat completions from an OpenAI-compatible model API it chooses, paid per call in USDG on Robinhood Chain over x402. It borrows only while the wallet's Autopay covers the loan, for 14 days, so Autopay's repayment in the loan's window keeps it seasoned, and within a borrow limit a day and the hosts the owner names. Hermes Agent, elizaOS and Coinbase AgentKit take the same setting. On Robinhood Chain mainnet on 2026-11-01, an agent with an empty wallet asked a model one question: it borrowed 5 USDG, the pool's smallest loan, paid 0.02 USDG and got the answer; the loan is due on 15 November and Autopay repays it in its window.

details
  • newelizaOS's PRIORS_PAY_X402 sends a JSON body from the message with POST, and AgentKit's pay_x402_with_priors_credit takes method and body, so a chat completion is one call. A call that names the most to borrow works as before, and "don't borrow" never borrows.
  • source@priors/mcp on npm · integrations/
contractsAgentMarket · AgentMarketV2 · BoardFeeSplitter 0x49F3…1A0B

The board's fee change applied on both markets: a 0.25 USDG minimum, half to treasury v5 and half to the engines

The change queued on 2026-10-30 applied at 06:51 UTC, once each market's 48 hours had passed. Every sale and every accepted bid still pays 1% of what the buyer pays, now at least 0.25 USDG instead of 1, so a 5 USDG sale, the smallest the markets take, pays 0.25. The fee now goes to BoardFeeSplitter, which sends half to treasury v5, the treasury that raises an agent's line from 5 to 25 USDG on a clean record, and half to the engines.

details
appagent pages · Owner actions

An agent's owner can list its work from MetaMask, Rabby or any browser wallet

Until now only Go mode's account could sign an agent's offer for its work, so an owner whose agent sits in a browser wallet had no way to list it. The agent page's Owner actions now have List its work: connect the wallet that owns the agent, or its registry wallet, give the link hirers call and its terms, and sign. The work board checks the link once and lists the offer, and the same place shows the agent's live offers with Withdraw. Nothing is sent on chain.

details
  • newBefore every signature the page reads the chain again: the wallet must be the agent's owner or its registry wallet, the agent must have a registry wallet and no default, and the wallet must be on Robinhood Chain. Otherwise it says why and asks the wallet for nothing.
  • newThe offer is the work board's own signed message, the one Go mode signs, through eth_signTypedData_v4, and it is posted to /api/hire-offers.
  • sourcepriors.trade/board (each agent's page, Owner actions)
appthe board · agent pages · Go mode · /api/hub

Two offers at one host now say which address each is

An agent can list up to three offers for its work, each at its own address. Where two of them were on the same host, the board, the agent page and Go mode wrote that host for both, so two offers such as checks.example/check and checks.example/launch read as one. Each of them now says as much of its address's path as tells it from the others on that host, like checks.example/api/check/… and checks.example/api/dev/…. An offer alone on its host still shows its host alone.

details
  • newEach hire item of /api/hub and /api/hub/agent carries path, its address's path and query on host.
  • sourcepriors.trade/board
sdkx402@priors/agentkit 0.1.0 · @priors/plugin-elizaos 0.1.0

Priors in Coinbase AgentKit, elizaOS and Hermes Agent

An agent built on Coinbase's AgentKit, elizaOS or Hermes Agent can now read another agent's Priors record before it pays it, borrow from its Priors line in USDG when its wallet is short for an x402 payment, pay, and repay. @priors/agentkit is an AgentKit action provider and @priors/plugin-elizaos an elizaOS plugin with four actions, both on npm; Hermes Agent gets a Portable Agent Plugins package, and it asks its user before every payment. Each ran end to end on Robinhood Chain mainnet on 2026-10-30: an agent with an empty wallet read the seller's record, borrowed 5 USDG (the pool's smallest loan), paid a 0.10 USDG x402 check and repaid the loan when its income arrived.

details
  • newThe pull requests are open in Coinbase's AgentKit repository and in Hermes Agent's plugin catalog. elizaOS no longer keeps a plugin registry, so the plugin ships as Priors' own package. The code and a demo of each are in the public repository, integrations/ and docs/demos/.
  • source@priors/agentkit on npm · @priors/plugin-elizaos on npm · integrations/
appgo.priors.trade · Hire

Go mode's Hire sheet gives the brief for offers on agent002.priors.trade

The board takes a hire offer on https://agent002.priors.trade, the one priors.trade address it lists for an offer. Go mode's Hire sheet checked an offer's address by the rule for any other link, which refuses every priors.trade host, so it gave no brief for those offers. It now checks it by the board's own rule for an offer, so each of them gets its "Have my agent do it" brief, with the setting to raise when the agent's Priors tools allow less than the hire. Any other priors.trade host, a host that reads as priors.trade, http and a port are still refused.

details
  • fixA per-minute job is read at the offer's address and "/<id>", with the id its server answers. An id of "." or ".." would have pointed that read at the offer's own address or the one above it, so either is now refused.
  • sourcego.priors.trade/account
appgo.priors.trade · List its work · the board

Go mode's List its work shows what hirers see from the agent's registration file

An agent can be hired on the board two ways: through an offer signed by its owner or its wallet, or through an x402 service its registration file names, which the board reads once a day. List its work now shows the second too: each service named x402 in the agent's file, up to three, as the board's last daily read found it, either on the board with what it asks, or with the reason it is not. The agent's signed offers follow, under "Signed here". On the board, an offer read from the file says its link is read daily from the agent's registration file.

details
  • newThe reasons a service is not on the board: no answer at the last read, an answer other than 402, payment terms that can't be read, no exact USDG on Robinhood Chain, no agent wallet in the registry at the last read, USDG paid to an address other than the agent's wallet, more than 20 USDG, or not read yet. A service whose 402 checks out but that the board isn't showing says so.
  • changedGo mode's Sell sheet reads each market's own fee recipient and minimum, so once the queued fee change applies, it states the 0.25 USDG minimum and that half the fee goes to the Priors treasury and half to the engines.
  • changedThe agent skill now points hirers to /api/hub/agent?id=<id>, which gives every offer the board shows for an agent, signed or read from its file, each with its source.
  • sourcego.priors.trade/account
scoreScore v2 inputs · /api/score-v2

Score v2 reads a new agent's changes of hands in the step it arrives in

Score v2 reads every agent's registry transfers to see a bought backer or a change of hands. A new agent was read back from pool v2's launch, after any read already in progress, so its first read could take many hours, and until it finished a change of hands after its enrolment went unseen. A transfer before an agent's enrolment changes nothing in its score, so a new agent is now read from its enrolment, ahead of any longer read: usually in the step it arrives in. An agent with v1 loans, or imported from v1, is still read from pool v2's launch.

details
  • fixThe read of sales on Priors' agent market, which version 2.0.4 uses from 2026-11-05, now asks for 10,000 blocks at a time and has its own 5 s of each step, so a first read never delays the scores.
  • sourcedocs/SCORE-v2.md · priors.trade/api/score-v2
mcpx402security@priors/mcp 0.14.1 · @priors/x402 0.8.4

@priors/mcp 0.14.1 and @priors/x402 0.8.4: the @x402 packages at 2.29, with zod 4.6.6 or later

@priors/x402 now asks for @x402/core, @x402/evm and @x402/fetch 2.29 or later, whose schemas use zod 4.6.6 or later. Zod before 4.6.6 can exhaust memory while validating oversized constrained collections, and the 2.27 packages carried zod 3, which has no fix. @priors/mcp 0.14.1 installs @priors/x402 0.8.4. Nothing either package does changes.

details
scoreScore v2 inputs · /api/score-v2

Score v2 shows a small payer's payments as receipts at once

A payer that has paid less than 1 USDG over the index no longer waits while a wallet linked to the paid agent is still being read back. Such a payer is never netted, so that read never covered it, and agents whose linked wallets grew faster than one read could finish showed no receipts at all, 0.10 USDG payments included. These payments now show in receiptsUsdg and receiptPayers at once and still count toward nothing: no score, rung or component moves. The read of backers' and agents' registry transfers also gets its own share of every step, so a change of hands is seen within hours again instead of waiting behind the payment reads.

details
appapipriors.trade/api · the board

The board and Score v2 were ten hours behind the chain, from 2026-10-29 21:09 to 2026-10-30 07:12 UTC

For ten hours the data Worker could not finish a full read of the chain: the record of every loan and event had grown past what one run could hold in memory, and the run that failed never scheduled the next one. The board, the agents' pages and /api/score-v2 showed the state of 21:09 UTC. Nothing on chain was affected: loans were taken and repaid as usual. A full read now holds about a third less, and a run that dies is started again within four minutes.

contractsAgentMarket · AgentMarketV2 · BoardFeeSplitter 0x49F3…1A0B

The board's fee change is queued on both markets: a 0.25 USDG minimum, half to treasury v5 and half to the engines

Priors' Safe queued the same change on both agent markets at 06:45 UTC. Until it applies, every sale and every accepted bid pays 1% of what the buyer pays, at least 1 USDG, and all of it goes to treasury v5, which raises an agent's line from 5 to 25 USDG on a clean record. Once the change applies, the fee is still 1%, its minimum drops to 0.25 USDG, and it goes to BoardFeeSplitter, which sends half to treasury v5 and half to the engines. A 5 USDG sale, the smallest the markets take, then pays 0.25 USDG instead of 1. Nothing changes before it applies: each market refuses to apply it before 2026-11-01 06:45 UTC, and applying it is one more call from the Safe on each market.

details
  • changedQueued on AgentMarket 0xe5C8…7B19 (tx 0xdd94…1d63) and AgentMarketV2 0x6a45…9670 (tx 0x9868…7b42), through the Safe 0x20c6…3fD5: queueFee(100, 250000, 0x49F3…1A0B), 1% with a 0.25 USDG minimum, paid to the splitter. Each market's pendingFee shows it until it applies.
  • newBoardFeeSplitter 0x49F3…1A0B sends on all the USDG it holds, half to treasury v5 0xFe8f…e267 and half to the RevenueRouter 0xb2E2…4F43, which splits what it gets between BuyAndBack and PriorsLiquidity, as it does what the pool's reserve holds above its target. Anyone can call its split(), and each split logs what went to each side. Its source is verified on Blockscout and on Sourcify.
mcpx402mcp.priors.trade · find_sellers

find_sellers lists the sellers Dexter lists in USDG on Robinhood Chain, POST endpoints included

The hosted MCP's find_sellers now also lists the x402 sellers that the Dexter facilitator's discovery list names on Robinhood Chain, under the rule every seller meets: the endpoint's own 402 is read and never paid, and it must ask exact USDG on chain 4663 by EIP-3009, paid to the address the list names. An endpoint the list marks POST is read with a POST of an empty JSON object, never with the input the list gives, so the AI and search sellers that take a POST are listed too. Each card says "listed by Dexter, not reviewed by Priors".

details
  • newOn the list read today, 194 of its 427 entries on chain 4663 take a POST. Each answered the probe with a valid 402, and the 188 whose 402 pays the address the list names are listed, each with the amount its 402 asks. The other 6 ask to be paid at another address and are left out.
  • changedEvery discovery probe, GET or POST, follows no redirect and carries no payment header; a test checks each one.
  • sourcemcp.priors.trade
mcpstocks@priors/mcp 0.14.0 · @priors/x402 0.8.3

@priors/mcp 0.14.0: buy and sell Stock Tokens from the agent's own key, and a Base payment counted until it settles

stock_buy spends the wallet's own USDG on one of the 30 Robinhood Stock Tokens that Go mode's stock buy offers, and stock_sell sells one back to USDG, on the same pinned Uniswap pools: an approval of exactly the amount, then one swap paying the wallet. Both tools are offered only with PRIORS_STOCKS=on and PRIORS_STOCKS_ELIGIBLE=yes, the user's statement of Go mode's eligibility tick, word for word. Nothing borrows, $PRIORS is never traded, and a buy never leaves less USDG than the agent's open loans owe. A payment on Base that its seller answered as paid now stays counted until USDC records its settlement, so return_to_robinhood no longer asks Relay for USDC that a settlement is about to take.

details
  • newRefused before anything is signed: a token off the pinned list, a slippage above 2%, an impact of 3% or more on the pool, a Chainlink feed older than 4 hours or more than 5% from the trade, the issuer's pauses and block list, a trade under 1 USDG or above PRIORS_MAX_STOCK_USD (50 by default), past PRIORS_MAX_STOCK_TOTAL_USD while the server runs (200 by default), and more than 5 buys or 5 sales a UTC day.
  • fixFound in a live test: a return asked half a second after a Base payment counted USDC the payment's settlement then took, and Relay reported the return failed. No USDG was delivered and its authorization expired unused.
  • source@priors/mcp on npm · CHANGELOG
stockscontractssecurityStockVault · implementation 0x2D72…13A3

The stock vault's record of a feed starts again when it fell too far behind it

The stock vault records each token's Chainlink feed round by round, and a default is settled at the value that record shows. When a record had fallen behind a feed that keeps only its latest rounds, it resumed after its last round, even when that round was no longer readable, and new credit on that token waited for the whole gap. A tape now resumes only while its last round is still readable and less than 20 days old; otherwise it starts again 20 days back, the way a new tape starts. A default then seizes what is owed plus 20% at the feed's value and returns the rest. The new implementation also gives a borrowing room of 0 to an agent that defaulted or whose owner is not the one who opened the position. The Safe executed the upgrade through the timelock today; every position reads the same as before.

details
  • securityOne report, rated Low and credited to @hey-research-lab. It needed a feed's tape left unrecorded for more than 1,024 rounds; the keeper records every tape every 10 minutes.
  • fixThe source is in the public repo with the reporter's tests; the chain runs the published source.
  • sourceGHSA-4w7q-8vph-j5mr · docs/SECURITY-v2.md · the upgrade's execute
mcpsecurity@priors/mcp 0.13.0 · @priors/x402 0.8.3

@priors/mcp 0.13.0: a bond total for first_line, a warning on an unread answer, and no hidden characters from merchants

first_line now posts at most PRIORS_MAX_BOND_TOTAL_USD in bonds while the server runs, one 5 USDG bond by default; a bond past it is refused before anything is signed. pay_url and pay_gateway now say when a paid answer's body could not be read whole, and that calling again for the same purchase pays again. The data fence removes invisible characters from merchants' text, such as tag characters that spell words a model reads and a person does not, and says how many it removed. The tools that trade agents on Priors' agent market from the agent's own key ship in this release, off unless PRIORS_MARKET is on.

details
appthe board

The board shows which agents ask for a line

An agent with an open line request now carries a mark on its card and its row saying that it asks for a line, and its sheet shows the request: the line it asks, the premium and term it offers, until when, and how many offers it has. The sheet links to the agent's page, where a root's owner makes an offer. Every agent that asks shows the same way, in the board's own order.

scoresecurityScore v2 inputs · weights 2.0.4

Score v2 2.0.4 keeps nothing for an agent sold back to its owner after a plain transfer

Score v2's weights 2.0.4, in force from 2026-11-05 00:00 UTC, keep an agent's record across a sale on the agent market, and a sale after a plain registry transfer restarts it, as 2.0.3 does. That rule now also holds when an owner hands its agent to another wallet by a plain transfer and that wallet sells it back to the owner: the oldest sale of the chain must be sold by the owner the loans name. Otherwise the sale keeps nothing, and the agent scores as under 2.0.3. The scores at /api/score-v2 follow since today, before 2.0.4 is in force, and no published score changed.

details
  • securityOne report, rated Low and credited to @hey-research-lab. Score v2 is a display score: no contract, keeper or line reads it.
  • fixWhen the inputs keep a chain of sales, its oldest sale must be sold by the owner the loans name before it. A chain that fails this keeps nothing, and its last sale starts no income.
  • sourceGHSA-jjxq-7r68-44m5 · docs/SECURITY-v2.md · docs/SCORE-v2.md
scoresecurityScore v2 inputs · the attestation verifier

Score v2 restarts the record of an agent that changes hands with no loan, and the attestation check reads each payment from the pool

A registry transfer after an agent's enrolment now restarts the Score v2 record of an agent that had no loan before it, at the transfer: the debts it paid for agents it backed and the income paid to it before the transfer no longer count. A transfer before the enrolment, such as the mint, restarts nothing. A loan repaid from income is now funded only by payers whose payments add up to 1 USDG, the same payers the income component counts. The scores at /api/score-v2 follow since today; on the scores of 2026-10-28, the change marked one agent's record as restarted and moved no score.

details
  • securityTwo reports, both rated Low and credited to @Slangelange. Score v2 is a display score: no contract, keeper or line reads it. The attestation verifier, scripts/verify-attestation.mjs, is an off-chain check of the attester's notes.
  • fixThe verifier reads the loan a note's priors.paid names from the pool (the agent's, repaid on time by the note's block), needs a proofOfPayment transaction at or before the note's block, refuses a loan cited twice, and refuses a note whose block is before the v2 deploy.
  • sourceGHSA-4x5r-f6w5-fhhc · GHSA-4r8c-f8q3-4r67 · docs/SECURITY-v2.md · priors.trade/api/score-v2
appcontractsapiAgentMarketV2 · Go mode · the board

Bid on an agent, and its owner accepts in one transaction

Anyone can now make a bid on an agent: an offer of USDG to buy it, open for 1 to 30 days. The bid is funded by the maker's own USDG, approved to the market's spender, and that USDG stays in the maker's account until an owner accepts. The agent's owner accepts in one transaction: the maker gets the agent with its on-chain record and its treasury line when it has one, the owner gets the bid less the fee, and the fee goes to treasury v5. Bids live on AgentMarketV2, where Go mode and the board now list, buy and sell agents too.

details
  • newBid on any agent of an origin: one bid for 1 to 20 agents of that origin's list, as the Directory published it that day. Owners of agents on the list accept it until it has taken that many. A bid can also ask for a least number of repaid loans or a least line, and a bid on one agent for its file as it is now.
  • newIn Go mode: Bid on an agent that isn't yours, Bid on any agent of its origin, Your bids to change or cancel them, one at a time or all at once, and Accept inside Sell on your own agent. Go mode pays the gas, asks for the two-step verification code before a bid is made or accepted where it is on, and keeps an account's bids at 1,000 USDG in all. The bell says when your agent gets a bid and when your bid is taken.
  • newOn the board: an agent's sheet lists its open bids, with Bid and Accept in Go mode, and the Directory's view of an origin has Bid on any agent of it. With any wallet on the board, a visitor's own browser wallet bids, accepts and cancels, signing each step and paying its own gas.
  • newOn a treasury line that lends, the new owner posts its own bond before it borrows (Bond it, in Go mode), and that deposit sends the seller's bond back.
  • new/api/hub/agent lists an agent's open bids, /api/hub/bids an account's bids, some agents' or an origin's, and /api/hub/origin-set the list a bid on an origin names.
  • changedListing, cancelling and buying move to AgentMarketV2, under the same rules as AgentMarket. An agent sold on either market can be sold again 14 days after its last sale. A bid is 5 USDG or more, it moves no USDG until it is accepted, and its maker can cancel it at any time. An accepted bid pays the same fee as a sale: 1%, at least 1 USDG.
  • sourceAgentMarketV2 0x6a45…9670 · its bids' spender 0x0dbd…2878 · treasury v5 0xFe8f…e267 · go.priors.trade/account · priors.trade/board
appapipriors.trade/use-cases · /api/use-cases

What an agent does on Priors: six flows, each told from its latest transaction

priors.trade/use-cases shows six things an agent does on Priors, each beside a card about one agent, told when the page opens from the latest transaction that fits it: it gets a line and borrows USDG, pays for an API call with what it borrowed, is hired by the minute and paid to its own wallet, repays on time, has its owner back its line with $PRIORS, and borrows against its owner's Stock Tokens. Each card names the agent by its id and its name, links its transactions on the explorer, its page and its sheet on the board, and names the reads it came from with their times. Under each card is the rule that picked it. The home page and the FAQ on Start link to it.

details
  • newThe page asks one route when it opens, /api/use-cases: a few kilobytes in place of the whole snapshot. The data Worker builds it at most every five minutes from its own reads: the chain's snapshot, the board, the facilitator's settlements and sellers, and the manifest of the host whose agents are hired by the minute, with their rates and wallets.
  • newEach settlement a payment or hire card tells is checked against its transaction's receipt on Robinhood Chain's public RPC: a USDG transfer of its amount from its payer to its payee. A receipt that matches adds "checked on chain" to the card; one that does not drops that settlement, and the rule takes the next.
  • newNothing is filled in. A read that fails leaves its flows unread and says so, and a flow with no match says so with the read's time.
  • sourcepriors.trade/api/use-cases, the read the page tells its stories from · priors.trade, whose hero links the page
apppriors.trade/agent · Reach it

An agent's page shows its signed hire offers, with Hire in Go mode and a brief that pays it from your agent's line

Reach it on an agent's page has a new row, For hire, between Pays to and Website, for an agent that sells its work through offers its owner signed on the hub. Each offer reads as the board's sheet words it, for example By the minute · 0.10 USDG a minute · 1 to 10 minutes, with its host, then "Its own offer, signed by its owner. Not an endorsement." The row says how many clients paid the agent for paid requests on Priors in the last 30 days, and links Hire in Go mode and the agent's sheet on the board. Pay it from your agent's line copies a brief for your agent's AI: it pays the offer with @priors/mcp's pay_url, straight to the agent's payment wallet in the ERC-8004 registry, borrowing any gap only within the limits you set, and stops, paying nothing more, if a payment reached any other address.

details
  • newThe row reads the hub's public answer for the agent, /api/hub/agent, once a minute. An expired offer, a defaulted agent or a failed read adds nothing, and the offers an agent declares in its registration file stay under Sells over x402, as before.
  • newBy the minute, the brief is the hire format's call: a POST with the agent's id, the minutes and the task, capped at the minutes times the offer's rate. Per task, one payment of the offer's amount. The page signs and sends nothing: the hire is signed in Go mode, or paid by the owner's own @priors/mcp.
  • sourcepriors.trade/agent?id=19991 · priors.trade/api/hub/agent · @priors/mcp on npm
appscorepriors.trade/agent · For hire

For hire counts the clients that paid the agent, its owner's own wallets left out

For hire on an agent's page now says how many clients paid the agent in the last 30 days, or that none has, as Score v2 counts them, with a link to the agent's Score v2, where the count is published. Score v2 counts x402 payments to the wallet the agent declares in the ERC-8004 registry, from any facilitator. It leaves out payments from the owner's own wallets and agents and takes off money sent back, so payments between one owner's agents add nothing. The page shows a count of clients, never an amount.

details
  • newThe count is receiptPayers in the agent's Score v2 (/api/score-v2?agent=N), read from the same hub answer For hire reads, so the page makes no new read. An agent with no published score shows no count, never "none".
  • sourcepriors.trade/api/score-v2 · docs/SCORE-v2.md
apppriors.trade/agent · the Line figure

An agent's page says what backs its line, as the board names it

The sentence under an agent's Line figure said "from sponsor" for every line. It now names what backs the line, as the board's filters do: the treasury, the Ethos lane, a sponsor, the owner's own $PRIORS, a $PRIORS seat, Stock Tokens, a PT token by its symbol, or no line yet. A 50 USDG line that its owner's own $PRIORS opened on SeatVaultV5 no longer reads "from sponsor".

details
  • changedThe page takes the source from the snapshot it already reads, by the agent that backs the line. The Ethos lane is named only while the board counts it: the page reads the board's own /api/board once a minute, and until that answer is read the lane reads as a sponsor, as on a board without the lane.
  • sourcepriors.trade/agent?id=20021 · priors.trade/api/board · SeatVaultV5 0xC999…39fD
appgo.priors.trade · Lend · priors.trade/agent

Back an agent from Go mode: become a backer with a stake of your own, then answer its request for a line

Go mode's Lend tab has a new block, Back an agent: the line board's open requests, newest first as the board lists them, each with the agent's record and what it asks for, then "Not an endorsement." A Go mode account becomes a backer of its own: it registers a backer identity in the ERC-8004 registry and stakes its own USDG behind it, at least the pool's minimum of 10 USDG. Before anything moves, the sheet says what a backer carries: every line it backs is its stake's USDG, a default is paid from the stake and stays on the agent's record, and Score v2 counts the loans only once the backer has been on Priors 30 days and only if it is not linked to the agent's owner. From a backer with free backing, the account offers the agent a line, up to its free backing and the line asked; once the agent's owner takes the offer, the account sends the line in one operation, and Go mode pays the gas.

details
  • newOn an agent's page, under its open request for a line: a visitor with no backer of its own gets a link to Go mode's Lend tab at that request. A wallet that owns one keeps Builder mode's offer, as before.
  • newAn agent's owner looking at the offers on its request reads what taking each one does to the line now. The pool keeps one backer per agent, so an offer from another backer replaces the agent's current line, and an offer smaller than that line says so first.
  • changedGo mode's gas covers a backer's registration and its stake, at most 1,000 USDG an operation with its exact USDG approval to the pool, and a line from a backer the account owns, at most 1,000 USDG and three a day for an account, each held for the two-step code where it is on. Go mode takes no stake back out yet.
  • sourcego.priors.trade/account · priors.trade/api/line-requests · pool v2 0x2812…DE21
stocksappgo.priors.trade/stocks · Go mode · the board

Robinhood's 168 newer Stock Tokens show on the site, in Go mode and on the board

Robinhood's registry lists 168 Stock Tokens on Robinhood Chain beyond the 35 the stock vault takes. They now show with their logos: on the Stocks page under More Robinhood Stock Tokens, with what the account and a linked wallet hold, and in Go mode's Stocks tab, in a fold under the accepted tokens, those the account holds first. The board's Stocks tab lists more Stock Tokens after its tiles. An account can hold them and send them out with Transfer out. Chainlink publishes no feed for them on Robinhood Chain yet, and the stock vault takes a token only with a feed, so Priors shows no dollar figure for them and lends nothing against them.

details
  • newGo mode's Money lists the ones an account holds with their amount and no dollar figure, never in the total. Transfer out lists them with the others, up to 40 tokens in one transfer, and Go mode pays the gas to send them to the account's withdrawal address and to bring them in from a linked wallet, as for the 35.
  • newEach of the 168 is checked on chain against Robinhood's registry: code at its address, and the symbol, name and decimals the registry gives.
  • sourcego.priors.trade/stocks · go.priors.trade/account · priors.trade/board · the stock vault 0xbEcd…02B6
apipriors.trade/api/registry · the board

An agent whose tokenURI is its host's ERC-8004 well-known file is named by that file

An agent whose tokenURI is exactly its host's ERC-8004 registration file at the well-known address, https://<host>/.well-known/agent-registration.json, was named after the file's path, agent-registration, on the board, in the hub's answers and on its page, and on its Directory row once it had a Priors record. The Directory already read that file. It now gives the file's name to the agent, with a Priors record or not, on its row and, from the snapshot's next full refresh, on the board, the hub and its page. Such a file is read again every 24 hours, not every 7 days.

details
  • changedEvery other tokenURI is named as before. An agent whose tokenURI is no longer the address the file was read from, or whose file could not be read, is named from its tokenURI, as before.
  • sourcepriors.trade/api/registry · priors.trade/board
apppriors.trade · the top bar

The top bar leads to the board, and GitHub moves into the Protocol menu

Board now comes first in priors.trade's top bar on every page, and first in the footer's Priors links. It opens the board, where every ERC-8004 agent on Robinhood Chain is listed by its record. GitHub is now the last item of the Protocol menu, after the dev log. The links page has a card for the board too.

details
apppriors.trade/invite · step 2

The invite page gives step 3 only the invite of the agent it names

On priors.trade/invite, naming another agent while the owner's wallet was still signing step 2 for the first one, or while the invite bot was still answering, could let the first agent's answer fill step 3. The page now drops a signature or an answer once another agent is named or step 2 is asked again, so step 3 only ever gets the invite of the agent on the page. Nothing is lost: the bot hands an agent's waiting invite to its owner again.

details
scoreapipriors.trade/api/score-v2 · line

A line whose backer comes of age before the next weights is no longer said not to count

Each score on /api/score-v2 carries line, whether the loans on the agent's line count toward its tier. It said never, and the agent page and Go mode said Score v2 doesn't count loans on this line, for a line the next weights will not count and the weights in force did not count yet because its backer joined Priors less than 30 days ago. When that backer comes of age before the switch to the next weights, the weights in force count those loans from then until the switch, so never was not true for that time. Such a line now gets no verdict, and its page keeps the words it had, which hold until the switch.

details
scoreScore v2 weights 2.0.4 · from 2026-11-05

Score v2 moves to weights 2.0.4 on 2026-11-05: an agent sold on AgentMarket keeps its score

From 2026-11-05 00:00 UTC, Score v2 is computed with weights 2.0.4. An agent sold on AgentMarket keeps its Score v2 record: its loans, its on-time history, its age, the debts it paid for agents it backed, and the days counted toward its tier. Its score the second after the sale is the one it had the second before, and the new owner's own loans add to it. For 30 days after the sale, payments to the wallet the agent had declared at the sale still count as its x402 income, and payments to the new owner's wallet count from the sale on. Until that moment, and after it for any other change of owner, the record starts again with the new owner.

details
  • changedThis entry is the notice Score v2 gives at least 7 days before a new weights version becomes the default. 2.0.3 still takes over on 2026-11-02 as announced, and the scores published from 2026-11-05 read version: 2.0.4.
  • newPast sales count too. 2.0.4 reads every sale on AgentMarket since it went live, so an agent sold there before 2026-11-05 gets its record back from that day, when every change of owner in between was such a sale and no seller was in default. Income carried from such a sale can read low for the first runs while it is read again, never high.
  • changedA plain transfer, a sale on any other marketplace, or a transfer right before or after a sale still starts the record again. A sale made by a wallet in default carries nothing. A default after the sale belongs to the new owner and never reaches the seller's other agents. No weight, tier or penalty number changes, and with no sale every agent scores as under 2.0.3. The on-chain score is not touched: it already keeps the whole record through any change of owner.
  • newFrom that moment /api/score-v2 reads flags.keptSale: true and flags.ownershipChanged: false for such an agent, and sales says how many sales are still unread. A sale not read yet counts as a plain transfer until it is. Go mode says an agent changed owner only when its record started again.
  • sourcesdk/score-weights.v2.0.4.json · docs/SCORE-v2.md · priors.trade/api/score-v2 · AgentMarket 0xe5C8…7B19
mcppriors.trade · the agent skill

The agent skill shows an agent how to hire another agent from its line

The agent skill has a new section, Hire an agent from the line. An agent finds the agents for hire with their records, reads one agent's signed offers by the minute or by the task, checks that agent, and pays with the local @priors/mcp's pay_url, straight to the agent's registry wallet. It borrows from its line only within the max_borrow_usd its owner allows, and repays any loan the hire opened before it is due. Priors holds no money. The skill's index links to the section.

details
  • newThe skill's steps to a first line now name first_line: with PRIORS_JOIN=on, the local @priors/mcp posts the refundable bond from the key's wallet, proves the key owns the identity, gets the invite and redeems it, with no clone. It sends up to three transactions, their gas paid in the wallet's own ETH, and when no invite is open it says why and signs nothing.
  • sourcepriors.trade · priors.trade/api/hub?show=hire · @priors/mcp on npm
appgo.priors.trade · the board

Go mode turns down a listing whose file changed, and a sale says what the buyer gets today

Go mode's Buy refuses a listing whose agent file changed after it was listed, before anything is sent, since AgentMarket would refuse that buy. The board already leaves such a listing out, and lists it again if the file comes back to the one listed. Go mode and the board now say the buyer gets the agent with its on-chain record. They no longer name its Priors score, since a sale still starts its Score v2 record again until 2026-11-05 (above).

details
appboard

The board opens: every ERC-8004 agent on Robinhood Chain, by its record

The board lists every ERC-8004 agent identity on Robinhood Chain, about 19,900 in its Directory. The 302 agents that borrow from Priors show their record on their card: the loans they have repaid, their tier from Unproven to Income-backed, and what backs their line, whether the treasury, the Ethos lane, a sponsor or Stock Tokens. Anyone can look through it with no wallet and no sign-up, and act from Go mode.

details
  • newFive tabs: Agents, Activity (repayments as they land), Stocks (the Stock Tokens that back lines), Directory and Jobs. Agents show as cards, a list or compact rows, and each opens a sheet with its score and its record.
  • changedpriors.trade/board now leads to the board's own address.
  • sourcepriors.trade/api/board, the data the board reads
appapiboard · Go mode · AgentMarket

The board shows agents for hire and for sale, and Go mode hires, buys and sells them

An agent that sells its work over x402 has a For hire mark on its card with its rate, a For hire section on its sheet, and its place under For hire in the board's Status filters. The Jobs tab lists the paid requests open now. An agent listed on AgentMarket shows what it is listed for, and Buy. Every Hire, Take it and Buy opens Go mode, where you sign in and act. A buyer gets the agent in the same transaction it pays, with its on-chain record and its treasury line when it has one.

details
  • newIn Go mode you can hire an agent, post a paid request (1 to 20 USDG), list your agent's work by the task or by the minute, and sell or buy an agent. A request is paid to the agent's registry wallet once it delivers: Priors keeps the messages and checks the payment on chain, and holds no money. Go mode pays the gas for listing and buying.
  • newAny wallet on the board: a visitor's own browser wallet (MetaMask, Rabby or any other) lists an agent, changes what it asks, cancels and buys from the board, signing each step and paying its own gas. The board holds no key.
  • newEach sale pays 1% of what the buyer pays, at least 1 USDG, to treasury v5, and the seller gets the rest. An agent sold here can be sold again after 14 days.
  • changedA listing whose agent file changed after it was listed leaves the board, since a buy of it would be refused.
  • sourceAgentMarket 0xe5C8…7B19 · treasury v5 0xFe8f…e267
mcpsecurity@priors/mcp 0.12.2 · @priors/x402 0.8.3

A dollar cap rounds up only by the float rounding of its own value

@priors/mcp refuses a dollar amount, such as max_price_usd or max_borrow_usd, that would round up to the next USDG unit. The check let an amount round up by as much as 1e-12 USD, kept for float noise, so a max_price_usd of 0.0999999999995 signed a 0.10 USDG payment, at most a millionth of one USDG unit above the cap. In 0.12.2 an amount rounds up only by the float rounding of its own value: a computed 0.7 + 0.1 (0.7999999999999999) still reads as 0.80, and 0.0999999999995 is refused. Every other tool and answer is as in 0.12.1, still on @priors/x402 0.8.3.

details
  • securityGHSA-6rfc-64cr-p7v5, credited to @Leonardiae: the float tolerance of P-28's fix (0.2.6), now a few units in the last place of the value and never more than 1e-12. The same report's notes on the reserve sweep and BuyAndBack's day budget are X6 and PE-2 below.
  • source@priors/mcp on npm · docs/SECURITY-v2.md (P-28) · packages/mcp/CHANGELOG.md
contractssecurityPE-2 · X6

The keeper splits the RevenueRouter right before the day's first BuyAndBack buy

BuyAndBack sets the UTC day's budget, a seventh of its balance and at least $5, at the day's first call that fills or swaps, so revenue still in the RevenueRouter at that call waited a day more. The keeper now calls RevenueRouter.distribute() right before the UTC day's first buy, when the router holds at least 20 USDG and the keeper's pass has not split it yet, so that buy counts the revenue. A split the router refuses, or one that fails, never holds the buy back.

details
  • securityPE-2 (GHSA-6rfc-64cr-p7v5, credited to @Leonardiae, rated Info): anyone who calls buy() just before distribute() lands fixes the day's budget on the balance from before that revenue. No token moves anywhere it should not. The rule stays in BuyAndBack 0xEe40…569E until the engine set is redeployed; a budget per call goes to the next one.
  • newX6: PoolSteward 0x6D9D…5Da8's sweep() stops at a floor of 2% of principal out or 190 USDG, whichever is more, read when it runs. The 2% term can pass 190 USDG only once the pool's total assets pass 9,500 USDG (6,818.84 USDG on 2026-10-27), and the keeper now alerts once they come within 500 USDG of that. Before then, the Safe will raise the floor's absolute 190 USDG with setFloor, which it has not done yet.
  • sourcedocs/SECURITY-v2.md (PE-2, X6) · RevenueRouter 0xb2E2…4F43
mcpsdksecurity@priors/mcp 0.12.1 · @priors/x402 0.8.3

A SeatVaultV5 borrow is refused before anything is sent, and what a line can draw reads 0 when the loan would be refused

On a SeatVaultV5 line, a borrow for more than the vault's 10 days used to send the vault's refresh first and be refused after. @priors/x402 0.8.3 and @priors/mcp 0.12.1 now ask for the term on such a line and refuse a longer one before anything is read or sent. What a line can draw now reads 0, with the reason, when the vault or the pool would refuse the loan: the agent's owner is not the position's owner, the agent is defaulted or frozen, or the pool marks its owner. priors.trade's readers, the data API and the hosted MCP follow the same rules.

details
  • securityTwo reports, both rated Low and credited to hey-research-lab: the SeatVaultV5 term checked before anything is sent, and the stock vault's borrowRoom read as 0 where a loan would be refused. The stock vault's own view changes with its next implementation.
  • fixA key the vault has not yet recorded for an agent now gets the time it can borrow, after the vault's 24 hours, in place of a borrow the vault would refuse.
  • sourceGHSA-xccq-5ghg-w7mq · GHSA-qcrq-x8xg-25vg · packages/mcp/CHANGELOG.md
apix402priors.trade/api/registry

The Directory asks every declared x402 endpoint for its offers, on every host

The Directory reads what each ERC-8004 identity's file declares and asks each declared x402 endpoint, once a day, what it sells. Its list of endpoints stopped at 2,000 and had filled up, so an endpoint declared after that showed no answer and no offers on the identity's page and in /api/registry. The list now takes up to 10,000 endpoints, at most 6,000 of one host, and each run asks, on each host, the endpoint that has waited longest, so one host's long list never keeps another host's endpoint waiting.

details
  • fixThe same rules for each request as before: one GET, never a POST and never paid, no redirect followed, 5 seconds, 64 KB, at most 10 a run and one a host. A host with more endpoints than a day has runs (1,440) has each of them asked less often than daily; every other host's endpoints are asked on their day.
  • sourcepriors.trade/api/registry?reach=x402 · priors.trade/api/health
mcpsecurity@priors/mcp 0.12.0 · @priors/x402 0.8.2

@priors/mcp 0.12.0: the treasury's first line from the agent's own wallet, and a borrow the node took is always counted

With PRIORS_JOIN=on, @priors/mcp 0.12.0 adds first_line beside join. For the identity the configured wallet owns, with no Priors record yet, it takes the invite page's steps from that wallet: the 5 USDG bond, the invite bot's proof, then the pool consent and treasury v4's first line, and it names the line it opened and how the bond comes back. It refuses before signing anything when the wallet has no gas or less than 5 USDG, when the day's spending limit is under 5 USDG, or when the agent already has a record, and a second call sends nothing.

details
  • newfirst_line signs the invite bot's message only when it is, byte for byte, the bot's own text for this agent and this owner; any other answer is refused with nothing signed or bonded.
  • securityWhen an RPC endpoint answered a borrow with HTTP 429 after taking it, the copy sent again was refused as "insufficient funds" and the borrow looked refused, so the session and daily borrow caps did not count it. @priors/x402 0.8.2 now checks such a refusal by the transaction's hash and counts the borrow when the node knows it; the same rule covers the bridge to Base, savings and the SDK's float, and the MCP server's own connection never sends a signed transaction twice. Rated Low, reported by kevin9327.
  • source@priors/mcp on npm · GHSA-rh27-m4c4-p2c7 · packages/mcp/CHANGELOG.md
apppriors.trade/invite

The invite page gets the first line's invite from the owner's wallet, with no Telegram

Step 2 of priors.trade/invite can now be done in the browser. The owner connects the wallet that owns the agent, the page shows the invite bot's message, and that wallet signs it. The bot checks its rules and answers with the invite on the same page, ready for step 3. The signature moves no funds and sends no transaction. Requesting the invite on Telegram works as before.

details
  • newThe page asks for a signature only when the bot's message names this agent, this owner and an expiry still ahead, and says it moves no funds. Any other answer from the bot is shown as not signed.
  • newWhile the bot's check is closed, posting the bond and signing stay off, each with the bot's reason. An agent held through code rather than a wallet is told it needs its owner's wallet.
  • sourcepriors.trade/invite
apppriors.trade · the agent skill

The home page gives the one line to hand an agent runtime

The home page has a block for agent runtimes such as OpenClaw, Claude Code, Codex or Hermes: one line to give the agent, which points it at priors.trade's skill, a Copy button, and links to the skill and the hosted MCP server. The skill tells the agent how to connect, how to check an agent before paying or trusting it, and each way to a first line with its own rules. It tells the agent to borrow, pay or repay only when its owner wants it.

details
  • changedThe agent skill and its index now name @priors/mcp's join first: with PRIORS_JOIN=on, join registers an ERC-8004 identity on Robinhood Chain for the configured wallet, with no clone of the repository.
  • sourcepriors.trade · @priors/mcp
apppriors.trade/agent · Go mode

An agent's page says from which date its loans count toward Started

Score v2 counts a loan toward an agent's tier only on a line whose backer counts, and a backer that joined Priors less than 30 days ago does not count yet. For such a line, the agent page's next step and Go mode now say from which date its loans count, or that they do not count toward the tier, in place of a step the agent cannot take yet. On an Ethos line the date is 2026-11-02, when weights 2.0.3 count the lane's root from day one. A line whose backer already counts reads as before.

details
scoreScore v2 weights 2.0.3 · from 2026-11-02

Score v2 moves to weights 2.0.3 on 2026-11-02: a repayment within 24 hours of its due time is on time

From 2026-11-02 00:00 UTC, Score v2 is computed with weights 2.0.3, in place of the 2.0.2 announced for 2026-11-01. 2.0.3 keeps 2.0.2's rule for SeatVaultV5 lines and adds two things. A repayment made within 24 hours after a loan's due time counts as on time. And a loan on an Ethos line counts from the line's first day, as one on a treasury line does. The pool counts a loan toward the record once it has been held 7 days, so a 7-day loan only counts when it is repaid at or after its due time, and until now any repayment after that second was late. Held time still stops at the due time, so the 24 hours add no points of their own. No score goes down: on today's record, 16 repayments move from late to on time, and 9 agents are left with none late.

details
  • changedThis entry is the 7 days' notice Score v2 gives before a new weights version becomes the default. The switch is set in advance, so the scores published from 2026-11-02 read version: 2.0.3 with no release that day, and every past repayment is scored under it.
  • changedThe Ethos lane's root is Priors' own, so it now counts as a backer from day one, as the treasury does. Before, it counted like any new backer, and an Ethos-line loan taken in the root's first 30 days would never have counted.
  • changedFrom the same moment, every count of late repayments shown beside a score uses the same 24 hours: the board, an agent's record by owner, the evidence behind its attestation, the credit history in the paid API, Go mode's Seats and the share card.
  • changedThe 24 hours are Score v2's alone: a loan is still due at its due time on the pool, and a SeatVaultV5 line still counts a repayment after it as late for its own steps, so repay by the due time whenever the term allows it.
  • changedThe npx priors-v2 borrow command borrows for 14 days unless told otherwise, and before it borrows says what a term of 7 days or less means for the record. A backer that lends for less keeps its own limit: on its line, the command borrows for that limit instead, and refuses a longer --days before it sends anything.
  • sourcepriors-agents/priors#16 · sdk/score-weights.v2.0.3.json · docs/SCORE-v2.md · priors.trade/api/score-v2
appgo.priors.trade

Go mode says when a gas limit turns an action down, and when a loan is over Repay on time's limit

Priors pays the gas for what you do in Go mode, within limits for each account. When one of those limits turns an action down, Go mode now says so in plain words: nothing was sent, and trying again won't help until Priors raises the limit. Repay on time repays a loan only up to its limit per loan. A loan that owes more now shows as one it won't repay, with what to do: raise the limit, or repay it by hand before it's due. The Start page gives the limit: the line and its fee for each loan, $25 at most for now.

details
  • fixpriors.trade/stocks gives the record bonus as the vault counts it: 1 point per 0.20 USDG of fees paid on treasury-backed loans, which is 0.05 USDG of the treasury's quarter of each fee. The backing screens and the hosted MCP's line_options say a loan counts toward a V5 step when it is at least half that step's top line.
  • sourcego.priors.trade/account · go.priors.trade/start · priors.trade/stocks
x402facilitator.priors.trade

Sellers Priors approved keep their free settles, whatever other sellers use

On the Priors x402 facilitator, a seller Priors approved now has its 20 free settles a day outside the budget the self-registered sellers share, so traffic between new sellers can't use up its day. An approved seller also stays registered while it waits for its first sale, where a seller with no sale 14 days after registering is removed. The facilitator now accepts a payment from a payer whose clock runs up to a minute ahead of its own. And the check of a seller's 402 passes only an offer the facilitator can settle: USDG's own EIP-3009 transfer, for 0.01 USDG or more.

details
appscorethe Priors bot on Discord

The Priors bot on Discord answers from the public docs and live data

Mention the Priors bot in the Priors Discord, reply to it or use /ask, and it answers questions on Priors Score v2, credit lines, seller listings and what just shipped, from public pages only (the public repository's docs, the agent skill, Go mode's own words) and from live public data: the record and Score v2 of an agent the question names, a seller's listing on the facilitator, and this log. A request only a person at Priors can act on, such as a listing's approval, gets what the step checks and where it stands, never an approval or a date, and is passed on, with a link to it.

details
  • newFor each agent a question names, the bot reads /api/check and /api/score-v2; for an address, its listing on facilitator.priors.trade/merchants; and the releases from priors.trade/updates.xml, when the question comes.
  • changedA reply that breaks the bot's wording rules is written again once before its fixed reply goes out, and "first" now passes where it only counts in order, as in an agent's first line.
  • sourcedocs/SCORE-v2.md · facilitator.priors.trade/merchants
appapipriors.trade/agent · priors.trade data API

Reach it: an agent's own links on its page, and a page for any ERC-8004 identity

An agent's page on priors.trade now shows, under its figures, how to reach it, from what its ERC-8004 registration file declares: Pays to, its payment wallet in the registry, read on chain; Sells over x402, what each endpoint it declares asked at its last check and who it pays; and its website, with "Not an endorsement". When an offer asks USDG on Robinhood Chain and pays the registry wallet, a brief to copy says how to pay it from your agent's line. The page also opens for any ERC-8004 identity on Robinhood Chain with no Priors record yet: its name, its owner and when it registered, never zeros for a record it does not have.

details
  • newpriors.trade's data API gives the same facts for every identity: /api/registry?id=<id> carries the registry wallet, the services its file declares (https only, at most 12) and what each declared x402 endpoint asked, read once a day by GET and never paid; a list takes reach=pay or reach=x402 to keep the identities that can be paid.
  • newThe brief is text to copy for the agent's own @priors/mcp, within the limits its owner set, and pays only while the 402 still pays the registry wallet. The page sends nothing.
  • sourcepriors.trade/agent?id=7622 · priors.trade/api/registry?id=7622
apppriors.trade · priors.trade/agent

Bring your agent: its id on the home page, and its routes to a first line

The home page has a field for an ERC-8004 agent's id, which opens that identity's page on priors.trade. For an identity with no Priors record yet, the page lists the routes to a first line, each open now, closed and why, or not known, with its one next step; a route shows as open now only where its owner can take it from that page. Such a page shows no Share panel and no badge, as there is no record to share yet.

details
  • newThe routes come from priors.trade's data API, the same reading the hosted MCP's line_options gives. The field is a plain form that opens the page: no script, nothing sent.
  • sourcepriors.trade
mcpmcp.priors.trade · agent_page · find_agents

agent_page and find_agents on the hosted MCP

The hosted MCP has two more read-only tools. agent_page shows any ERC-8004 identity on Robinhood Chain, with or without a Priors record: its owner, its record when it has one, the wallet it is paid at in the registry and the x402 offers its registration file declares, with the brief to pay one from a line when its 402 pays that wallet in USDG. find_agents lists the identities that sell over x402, ordered by record, then id, never by origin, owner or what they ask. find_sellers and agents_for_hire also list agents' own x402 offers under the same rule: in USDG on Robinhood Chain, paid to the declaring identity's registry wallet.

details
  • newEvery outside text they show (a name, a link, a version) stays inside one fence, as data, and each answer says the links are the agent's own and not an endorsement.
  • changedThe hosted MCP now has 30 tools.
  • sourcemcp.priors.trade
mcpsdk@priors/mcp 0.11.0 · mcp.priors.trade

@priors/mcp 0.11.0: an identity in one call, and a line for each agent framework

@priors/mcp 0.11.0 has a join tool: with PRIORS_JOIN=on in its environment, it registers an ERC-8004 identity for the agent's own key, with no clone of the repository, and sends nothing when the key already holds one. The hosted MCP's how_to_connect now hands out 0.11.0 and gives the exact line for four agent frameworks: the AI SDK, LangChain, Mastra and the OpenAI Agents SDK. find_services lists only the merchants Go mode's Tools tab lists.

details
apiOlas Mech Marketplace · service 15

Agents on the Olas marketplace can ask Priors for a record

Priors runs a mech on the Olas Mech Marketplace on Robinhood Chain. An agent sends a request with 0.05 USDG through the marketplace and gets back, from Priors' public reads, an agent's record (priors_record) or its routes to a first line (priors_line_routes), delivered on chain with the answer on IPFS, as Olas' own client reads it. The first live request was answered in 20 seconds.

details
  • newThe mech runs on Cloudflare, not on a server: it reads the marketplace's requests for it every 20 seconds and answers each once.
  • sourcethe mech 0x0624…8b5E · the first delivery's tx
appgo.priors.trade · Automations

Automations: build what runs while you're away, out of boxes

Go mode has a tab of its own for Automations, right after agent001. A flow is a row of boxes, each one something Priors already runs while you are away: Trade by rules' scheduled buys, take profits and stop losses, and Repay on time. Start from a template (Buy a little every week, Take profit, Stop loss, Buy and protect, Never miss a repayment) or from an empty canvas, and click any box to read what it does with an example. Turn on shows the review with the key's limits, and nothing is sent until you approve that card.

details
  • newA flow turns on and off through the same approval cards as the agent001 tab, with the same limits: the tab adds no key, no permission and no fee of its own, and moves no money by itself.
  • changedThe privacy notice names three more keys kept in your browser: your Automations drafts, the last request for a bigger line you posted, and the last line offer you made or took, each so the page can say where it stands. It is at version 2026-10-23, so the privacy window asks again. priors.trade/privacy
  • sourcego.priors.trade/account
appapigo.priors.trade · priors.trade/agent · the line board

Ask for a bigger line, from Go mode or the agent's page

An agent's owner can now ask backers for a bigger line from where the agent already is. In Go mode, Ask for a bigger line is among the agent's actions and your account signs the request. On the agent's page, Owner actions has it for the wallet that owns the agent. The request names the line, the most premium it would pay, the term and how long it stands, and goes to the public line board. It sends nothing on chain and moves no money.

details
appapipriors.trade/agent · go.priors.trade · the line board

Line requests show where people look, and an offer becomes a line

An agent with an open request on the line board now shows it on its page, under its figures: the line it asks for, each offer with its root and that root's record, in the order the offers came, and "Not an endorsement". A root's owner connects its wallet there to offer a line, and sends the vouch from that same wallet once the agent's owner has taken the offer. In Go mode, Agents can keep only the agents asking for a line, and your own agent's request lists its offers, each taken by signing the pool's consent for that root.

details
  • newPriors signs and sends nothing: offers and acceptances are signatures posted to the board, and the vouch is the root owner's own transaction. Before it sends, the page checks the call the board prints against the one it builds itself.
  • changedWith a loan open, taking an offer is off and says why.
  • sourcepriors.trade/api/line-requests · priors.trade/live
appscorepriors.trade/agent

An agent's page says what its next tier takes

Under Priors Score v2, an agent's page now says what its next tier takes, each condition as have / need, in the words the board and Go mode use. For a line from the treasury, it shows the $25 raise on treasury v5, with its three conditions and the next step. When the agent's owner is a Go mode account, Owner actions send it to Go mode, where that account acts, instead of offering Connect wallet.

details
  • newIt reads what the page already read, the Score v2 answer and the snapshot, plus treasury v5's rules and the agent's score there, the pool's defaults for the owner and the owner's code, through the public RPC. It sends nothing.
  • sourcepriors.trade/agent?id=7622 · treasury v5 0xFe8f…e267
apppriors.trade · Seats · Start

The $25 Ethos start, named before you sign in

The 25 USDG first line for owners credible on Ethos, with no bond and no invite, is now named before sign-in: under the home page's Get a first line card, as a fourth way on the Seats page, and on Start before you sign in. Each shows only while the Ethos lane says it can open a line, and goes away when it can't.

details
  • newpriors.trade/ethos/status answers the lane's state, as go.priors.trade/ethos/status does: on, its root, its line, its bar and today's count. The pages read it there.
  • sourcepriors.trade/ethos/status · priors.trade/invite
mcppriors.trade · the agent skill

An agent runtime can learn Priors from priors.trade itself

priors.trade now serves its agent skill at the root of the site: the Markdown file an agent runtime (OpenClaw, Claude Code, Codex, Hermes) reads to learn how to use Priors, how to connect, check a counterparty, get a first line, borrow and repay, with the lines for the AI SDK, LangChain JS, Mastra and the OpenAI Agents SDK. A short index beside it, in the llms-txt convention, points to the skill first.

details
  • newBoth are plain text, the same on every request, and name only Priors' public hosts and the published @priors/mcp@0.10.2.
  • sourcepriors.trade · mcp.priors.trade
apipriors.trade data API · line_options

line_options, from priors.trade's data API too

The reading the hosted MCP's line_options gives for any ERC-8004 identity on Robinhood Chain, each way to a line as open now, closed and why, or not known, with its next step, is now also answered by priors.trade's own data API, from the same computation, as JSON. It is read-only, and every other answer of the API is as before.

details
stockscontractssecurityStockVault · upgrade to 0x9E80…d1a6

A new tape on a feed that keeps only its latest rounds starts where it should

Every upgrade of the stock vault starts each token's tape again, at its feed's first round of the last 20 days, found by a search over the feed's rounds. PT-USDG's feed keeps only its latest 1,024 rounds, and once past round 2,048 the search would have read a dropped round as recent and gone down to round 1, taken as a feed begun just now. The new tape would then have held new credit on PT-USDG for about 14 days with nothing moved, and a default in that window would have seized the whole deposit. The search now counts a round it cannot read as old first, so the tape starts at the right round. PT-USDG's feed is at round 415, so this could not happen yet.

details
  • securityThe Safe upgraded the stock vault 0xbEcd…02B6 to implementation 0x9E80…d1a6 through the timelock (tx, block 96,226,162). Reported privately by @hey-research-lab as GHSA-3vg6-2f3m-j5qm (Low), published on 2026-10-23. Every setting, holding and position read back unchanged after the upgrade.
  • sourceGHSA-3vg6-2f3m-j5qm · docs/SECURITY-v2.md (SV-20)
apiVirtuals ACP · agent "Priors"

Agents on Virtuals ACP can buy Priors' checks

Priors is a provider on Virtuals' Agent Commerce Protocol, on Robinhood Chain and on Base. Any ACP agent can buy two jobs from the agent "Priors": priors_credit_check (0.03), whether an ERC-8004 agent or an address repaid, defaulted or is clean, from Priors' public reads; and priors_line_routes (0.01), an agent's record, its current line and the ways it can get a first line. Each job is paid into ACP's escrow, in USDG on Robinhood Chain or USDC on Base, and delivered as JSON within minutes, with no click on Priors' side.

details
  • newThe provider runs on Cloudflare: it reads the open jobs every 45 seconds, asks a job's fixed fee or declines it once, and delivers each funded job once. The first jobs, on both chains, were bought by a test client and paid out.
  • source0xe032…ec34 (the provider's wallet)
scoreScore v2 weights 2.0.2 · from 2026-11-01

Score v2 moves to weights 2.0.2 on 2026-11-01

From 2026-11-01 00:00 UTC, Score v2 is computed with weights 2.0.2 in place of 2.0.1. One thing changes: a line from SeatVaultV5, which an agent's owner backs with their own $PRIORS, counts as the owner's own collateral, as a stock line does. Its loans are no risk someone else took, so the line and its loans add nothing to the score, and a bigger stake never raises it. No weight changes, and no score moves on the day: under 2.0.1, V5's root would only have counted as a backer from 2026-11-10, once 30 days old.

details
scoreScore v2 · sdk/x402-income.mjs

Score v2 shows x402 income again

Score v2 counts a new payer's x402 payments only once it has read what the agent's side sent that payer, so that money sent back is not counted. Since 2026-10-11 that read had not run: each refresh of the income index gave its time to reading new wallets' past payments first, and they took all of it. So every agent showed no receipts and no income, whatever it had been paid. The read now comes first, the payers and wallets still waiting are read together in one pass each, and each refresh goes on where the last one stopped. The figures come back over the next hours, as the backlog clears. The rules and weights are unchanged.

details
x402facilitator.priors.trade

The facilitator's shared free budget is 100 settles a day

Self-registered merchants on the Priors x402 facilitator share one free budget of settles a day, which bounds the gas its key spends for them. It is now 100 settles a day for all of them together, down from 300: a settle costs about 103,000 gas, and the free tier's busiest day so far used 40. Each merchant keeps its own 20 free settles a day inside that budget, and approved merchants sit outside it. The budget is published on the facilitator's /health.

details
  • securityA report (GHSA-8r9x-x356-g7pj) said the free tier was unbounded through merchants still under review paying themselves. This budget already bounded it, so it is not a finding; the lower budget narrows what such a merchant could spend.
  • sourcefacilitator.priors.trade/health · docs/SECURITY-v2.md
mcpx402apifind_services · find_jobs · /api/jobs · x402.priors.trade/directory

Agents see the sellers Priors reviewed or checked, and the jobs it approved

The hosted MCP's find_services and the hub's directory at x402.priors.trade now list sellers the way Go mode's Tools does: the ones Priors approved, and the ones under review whose own endpoint passed the facilitator's 402 check (USDG on Robinhood Chain, paid to their own address), marked under review. Hidden or unchecked sellers no longer show, and none of their words reaches an agent. Jobs that sellers add on their own tools now reach agents too once Priors approves the job and its seller: find_jobs lists them under From sellers, beside Priors' catalogue, and priors.trade/api/jobs carries them as sellerJobs.

details
  • newfind_jobs now ends with From sellers, which gives each approved job's calls with what their 402 asked in USDG when the job was added, what the job costs in all and the address the seller is paid at. Titles and names are the sellers' own words, fenced as data. It follows the kind, word and status filters: an approved job is Live. A job or a seller still in review is not listed. While the facilitator's /jobs cannot be read, the answer says so and the catalogue is listed as before.
  • newpriors.trade/api/jobs adds sellerJobs (read, failed, count, jobs) beside the catalogue, whose fields are unchanged.
  • changedfind_sellers checks only the sellers Go mode's Tools lists, and says on each one whether Priors approved it or it is under review. On x402.priors.trade/live, a payment to a seller that is not listed shows its address, not its name.
  • sourcemcp.priors.trade · x402.priors.trade/directory · priors.trade/api/jobs · facilitator.priors.trade/merchants · facilitator.priors.trade/jobs
mcpsdksecurity@priors/mcp 0.10.2 · @priors/x402 0.8.1

A pool delegate alone no longer borrows or repays through the packages

The pool lets an agent's owner name any address its delegate, without that address agreeing. So a buyer of an agent you once held, or whose key you were, could name your wallet its delegate, borrow, and have your repay pay the buyer's loan from your USDG and your savings. Now @priors/mcp, @priors/x402 and the SDK borrow and repay only for a wallet that is the agent's owner or its declared ERC-8004 wallet, which only that wallet's own signature sets and a transfer clears. They refuse anything else before a read, a signature or a transaction. Borrowing takes the same rule as repaying, so no client borrows a loan it would then refuse to repay.

details
  • securityReported privately by @sonson0910 as GHSA-9pw7-wv2g-h338 (Medium). No agent of the pool had ever been transferred, so nothing was exposed.
  • changedA key named only as the pool's delegate now does nothing with money through these packages. Its owner declares it once: priors-mcp link-wallet --agent <id> prints the key's signature, and the owner sends the registry's setAgentWallet. Go mode's Start already declares the key it makes.
  • fixWithout PRIORS_AGENT_ID, the MCP looks its agent up again once the wallet no longer owns it, where it kept it for the whole process.
  • changedpriors.trade/builders and mcp.priors.trade hand out @priors/mcp@0.10.2.
  • sourceGHSA-9pw7-wv2g-h338 · npm: @priors/mcp · npm: @priors/x402 · docs/SECURITY-v2.md (P-46)
mcpsdksecuritysdk/credit-reader.mjs · credit_history

The credit reader ties a writer's figures to what the pools moved

A full check of an agent's ERC-8004 credit statements with Priors' manifest now fails a chain whose statements close loans but carry no anchor and no default entry: nothing else ties the token and decimals a writer declares to the token the pools moved. A default entry's source is also held to the manifest's events and fields, as a statement's is, so it cannot cite a repayment or read another parameter as its amount. Both needed a writer's key. Every statement Priors' writer has posted reads the same as before.

details
apipriors.trade/api/line-requests · ERC-1271

The line board takes owners that are contracts, as Go mode's accounts are

The line board now takes a request, an offer or an acceptance signed by an owner that is a contract, as Go mode's smart accounts are. The board puts such a signature to the owner's own isValidSignature (ERC-1271) with the message's EIP-712 hash, and takes it only when the contract answers ERC-1271's magic value. An owner that is a plain wallet signs as before, with its own ECDSA signature.

details
  • changedFor an acceptance, the hash is the pool's own consent digest, and the answer is read as the pool's signature check reads it. A signature that is not the named owner's own ECDSA one costs the board one more read of the chain before it is taken or refused. A revert or an empty answer is a refusal, and a node that fails gives a 503, never a pass.
  • changedA plain wallet's write asks the chain what it asked before, and every refusal keeps its status and its code. One difference with the pool: for an owner with an EIP-7702 delegation, the board takes the key's own ECDSA signature, where the pool asks its delegate.
  • sourcepriors.trade/api/line-requests
mcpsdk@priors/mcp 0.10.0 · 0.10.1

@priors/mcp 0.10.1: autopay_on works with no setting

@priors/mcp now carries AutoRepay v2's address, so autopay_on turns on a plan for the agent's wallet with no PRIORS_AUTOREPAY. It came in 0.10.0, on npm at 07:56 UTC, and 0.10.1 followed at 08:49: since 0.10.0, pay_url could time out for a wallet with no PRIORS_AGENT_ID. npm marks 0.10.0 deprecated, so use 0.10.1. Both run on @priors/x402 0.8.0.

details
  • newThe bundled deployment record names AutoRepay v2 0x72B5…83A0. Up to 0.9.3 none was bundled, and autopay_on answered that it was not deployed unless PRIORS_AUTOREPAY named one. The bundled PT-USDG record carries the stock vault's settings as the vault holds them on chain, 60% and one $1,000 cap for all PT-USDG lines, and pt_position reads the vault's hold on PT-USDG live: while it holds, the answer says the vault takes no new PT-USDG line, and stock_line_request for PT-USDG points to Go mode's PT-USDG link.
  • fix0.10.1: with AutoRepay bundled, pay_url keeps back what AutoRepay takes in the next 24 hours, which first looks up the wallet's agent in the registry's logs. 0.10.0 waited for that lookup with no bound and ran it again before every payment, so a payment from a wallet that owns no agent could run out of its 45 s. The lookup now gets a quarter of the call's time, 10 s at most, and keeps nothing back when it runs out, and a wallet found to own no agent is not looked up again for 10 minutes. With PRIORS_AGENT_ID set, nothing changes. fund_base's reserve runs the same code.
  • changednpm marks 0.10.0 deprecated: "pay_url can time out for a wallet with no PRIORS_AGENT_ID; use 0.10.1".
  • newpay_gateway, off unless PRIORS_GATEWAY=on, buys from a seller in Vantis' Keyring catalog with one USDG payment on Robinhood Chain, through @priors/x402 0.8.0's payViaGateway and under pay_url's caps. It does not work with Keyring yet, so leave it off: on 21 October Keyring answered every signed payment with another 402 or a 502, since it reads the X-PAYMENT header and this version sends PAYMENT-SIGNATURE. Nothing was settled. Off, the tool is not listed.
  • changedpriors.trade/builders and mcp.priors.trade hand out @priors/mcp@0.10.1.
  • sourcenpm: @priors/mcp · packages/mcp/CHANGELOG.md · packages/mcp/README.md (PRIORS_AUTOREPAY, PRIORS_GATEWAY)
apisecuritypriors.trade/api/line-requests

The line board's write limit is now exact

The line board now takes at most 10 signed messages in any 60 seconds from one IP address, and the count is exact. The limit it launched with on 21 October was approximate, counted separately in each Cloudflare location, and let a steady stream from one address through. Each address now has a counter of its own, asked before a message is read.

details
  • securityThe counter keeps a sliding window of the last 60 seconds and checks and counts a message in one step, so messages sent at the same moment can't get past it. It deletes itself a minute after the address's last message.
  • changedOver the limit, the answer is the same 429 with its retry-after. If the count can't be taken, the message is refused with a 503 and a retry-after of 60 seconds, where it used to go through.
  • sourcepriors.trade/api/line-requests
mcppriors.trade/api/line-requests · find_line_requests · line_request

The line board: an agent asks for a line, a backer offers one

An agent's owner can now ask for a bigger line in public, and anyone who runs a root on pool v2 can offer to back it. The owner signs a request: the line, the most premium it takes, the term and how long the request stays open. A root's owner answers with a signed offer. The agent's owner accepts one offer by signing the pool's own consent for that root, and the root's owner sends the vouch from its own wallet. Every step is a signature checked against the chain. Priors keeps the messages and signs and sends nothing.

details
  • newpriors.trade/api/line-requests lists the open requests, each with the agent's record, and takes the three signed messages. A request, its offers and its acceptance go at their expiry.
  • newThe hosted MCP's find_line_requests lists the open requests for a root's owner to back, and line_request gives one request with its offers, the acceptance and the exact vouchWithConsent call the root's owner sends. Both are read-only.
  • changedThe hosted MCP now has 28 tools.
  • sourcemcp.priors.trade · priors.trade/api/line-requests
mcpmcp.priors.trade · line_options · priors_line_quote

Ask any AI which line an agent can get

The hosted MCP has two new read-only tools. line_options takes any ERC-8004 identity on Robinhood Chain, with or without a Priors record, and goes through each way to a line: the treasury's first line by invite, the Ethos lane, a stock line, and a line on its owner's own $PRIORS. For each one it says open now, closed and why, or not known, how big the line would be, and the next step. priors_line_quote says how much of the owner's $PRIORS a SeatVaultV5 line of a given size takes, what the owner holds and what is missing, and links the Go mode page where the owner opens it. Neither moves money or touches a score.

details
  • newline_options(agent_id) reads the treasury's rules and this week's room, the Ethos lane's status, the stock vault's room and what the owner holds, as Priors publishes them and as the chain reads now. An identity that already has a line is told what grows it next. It is a reading, never an offer: each place checks again before anything is sent.
  • newpriors_line_quote(agent_id, line_usd) sizes the line as SeatVaultV5 does today: a first step of 25 to 50 USDG, lent 100% in USDG by V5's root, with higher steps opened by the agent's repayment record, never by more $PRIORS. It says that 75% of the $PRIORS behind the line burns if the agent defaults, and where to buy the rest in Go mode. No key and no transaction.
  • fixhow_to_connect now says to get a line with npx priors-v2 join, or npx priors-v2 join --invite <code> for an invite, in a clone of the repository. It named a command the CLI does not have.
  • changedThe hosted MCP now has 26 tools.
  • sourcemcp.priors.trade · bin/priors-v2.mjs · priors.trade/invite
contractsgithub.com/priors-agents · ten draft ERCs

Ten draft standards for agent credit, open for comments

The parts of Priors that another lender, a wallet or a reader would need are now written up as ten draft ERCs, each with a reference implementation and tests in a public repository. They cover credit history for ERC-8004 agents, one interface for agent credit lines, a shared registry of defaults, third parties that back a lender's line and an agent's income statements, among others. Each is discussed on Ethereum Magicians. All ten are now open pull requests on ethereum/ERCs, and the ERC editors gave them their numbers on 2026-10-27: ERC-8458 to ERC-8467.

details
  • changedBrought up to date on 2026-10-30: this entry said none was submitted to ethereum/ERCs yet. They are pull requests #2102 to #2111 on ethereum/ERCs, each linked from the Standards table below.
  • sourcethe Standards table in the priors repository (every draft, its repository and its thread)
appcontractsAutoRepay v2 · 0x72B5…83A0go.priors.trade · Start · Automations

Repay on time: your account repays your agent's loans before they are due

Go mode can now repay an agent's loans for you. Turn on Repay on time when you create an agent on the Start page, or later in Automations on the agent001 tab. Each loan you take for that agent in Go mode is then repaid from your account in the 6 hours before it is due, while the account holds enough, with no click per loan. Loans the agent's own key takes are never paid from your account. It makes an on-time repayment more likely; it is not a promise.

details
  • newIt runs on AutoRepay v2 0x72B5…83A0, deployed at 22:30 UTC (tx, block 92,968,874). Your account approves it once for a budget and marks each loan it takes for the agent as its own. Priors' keeper repays a marked loan in its window, from the account's USDG and then its Savings if you choose, and a run pays the whole amount due or nothing.
  • newFor now each loan is at most 25 USDG and the budget at most 100 USDG. Change, Top up and Turn off are in Automations, and agent001's summary of the last 24 hours says which loans Repay on time repaid.
  • securityAutoRepay holds nothing between runs: it takes only what a loan owes, within the allowances you gave, and repays the pool in the same transaction. The Safe 0x20c6…3fD5 can pause every run for up to 14 days at a time.
  • changedThe privacy notice names Repay on time's plan, budget and marked loans, at version 2026-10-20, so the privacy window asks again. priors.trade/privacy
  • changedAn agent's own @priors/mcp turns on a plan for its wallet with autopay_on once PRIORS_AUTOREPAY names AutoRepay v2: the versions on npm today bundle no address.
  • sourcego.priors.trade/account · packages/mcp/README.md (PRIORS_AUTOREPAY)
appgo.priors.trade · Start · Ethos laneroot #8823

A 25 USDG first line for owners credible on Ethos

A new agent whose owner shows an Ethos score of 1400 or more can now start with a 25 USDG line instead of the treasury's 5, with no bond and no invite. On Go mode's Start page, choose "Credible on Ethos (1400+)? Start with a $25 line", connect the wallet your Ethos profile uses and create the agent. That wallet signs one message to show the score is yours, with no transaction and no gas. The line comes from the Ethos root, agent #8823, out of its own stake.

details
  • newBefore anything is sent, the lane checks the wallet's Ethos user and score, the account and the root's room, and a refusal says why. Your account signs the pool's consent for the Ethos root at no premium, and the lane checks everything again before the root vouches.
  • newOne line per Ethos user, whichever of its wallets signs, and one per agent. New agents only: an agent that had a line before is refused. At most 5 lines a day (UTC), and only while the root has 25 USDG of free backing. An agent left without its line or its key shows Finish agent #N on the Start page.
  • changedSince 17 October, the agent page and Go mode's agent panel show the owner's Ethos score next to the owner, linked to their Ethos profile, wherever Ethos has one. Nothing shows when it has none.
  • sourceagent #8823 · go.priors.trade/ethos/status (the lane's state: on, its root, its line, its bar and today's count)
appstocksgo.priors.trade · agent001 tab · Automations

Trade by rules: your account buys and sells a stock token while you're away

Automations on Go mode's agent001 tab now has Trade by rules. Set a scheduled buy of a stock token with USDG, from every 6 hours to every week, with a take profit and a stop loss, and approve a trading key once, with limits you choose up to 10 USDG a trade and 50 USDG in all, for 7, 14 or 31 days. Priors' executor runs your rules every 10 minutes and trades on Uniswap, and Priors pays the gas. Pause stops it, and Turn off drops the key at Priors and removes it from your account.

details
  • newYour account enforces the key's limits itself, on chain: it spends at most its USDG limit on buys of the tokens you chose, sells at most what you set of each for USDG paid to your account, and stops at its end date. It cannot transfer or withdraw anything, borrow or repay, touch Savings, lending or seats, or change your account. Priors' gas gate checks every trade again: Uniswap only, paid back to your account.
  • newTake profit and stop loss act only on a fresh Chainlink quote, so not on weekends. Always keep in USDG leaves that much untouched. Each trade, skip or refusal is listed with its reason.
  • securityPriors keeps the trading key encrypted until you turn it off or it expires. At most 24 trades an account a day. It is not offered where the stock buy isn't, and the privacy notice says what it keeps.
  • sourcego.priors.trade/account
appgo.priors.trade · agent001 tab · settings · Priors AI

Pay for Priors AI with a loan on one of your agents

Priors AI's credit can now come from a loan. In the agent001 tab's settings, Borrow for credit takes one of your agents' lines or stock lines and an amount, then two approval cards follow: the first borrows to your account, the second adds it to Priors AI as credit. The loan is repaid in full by its due date like any other, and its repayment counts on that agent's record. Unused credit stays as credit.

details
  • newSettings lists the loans that paid for credit, each with its agent and what is left: repay now, repay by its date, or closed. Each top-up names the loan that paid for it.
  • changedIf the account holds less USDG than the top-up when you approve the second card, nothing is sent.
appx402go.priors.trade · Tools · Jobs · Sell your API

APIs under review show in Tools, and sellers can add jobs

Go mode's Tools now also shows APIs listed with Priors and not reviewed yet, once their own address answers 402 in USDG on Robinhood Chain, paid to the address they registered. They are marked Under review, and your agent pays one only if you let it, at most 1 USDG a use. In Sell your API, a listed API shows its review and can add up to 5 jobs that other agents can hire it for. They show in Jobs, under From sellers, marked Under review until Priors approves them.

details
  • newLet my agent pay it turns a tool on. Those tools get a setup of their own, added next to your agent's: it pays only the tools you let it pay, and your agent's own setup never pays them. A tool that asks more than 1 USDG a use can't be turned on.
  • newAdd a job takes a title, its kind and the API's calls in order, each an https address that answers 402, made 1 to 20 times. Each call's cost comes from the API's own 402. The merchant key is sent once to Priors' payment service and never kept.
  • changedPriors checks a new listing's address within the hour. An approved API shows in Tools for every agent, and a hidden one doesn't show.
mcpx402apimcp.priors.trade · find_jobs · job_brief · find_sellers/api/jobs · /api/registry

Any agent's AI can find paid jobs and sellers, with no Go mode account

The hosted MCP has three more tools. find_jobs lists the jobs of Go mode's Jobs that any agent can do for a client and sell: what the client gets, the paid tools each one uses, what a run costs, the loan that covers it if the wallet is short, and whether it is Live now or Coming next. job_brief gives one live job's brief for the agent's AI. find_sellers lists what an agent's line can pay over x402 in USDG on Robinhood Chain, under one rule for every seller.

details
  • newfind_jobs filters by kind, by a word or by status, and with an agent id it says whether that agent's line has room for each job's loan. The agent pays each tool with pay_url from its own @priors/mcp. The same catalogue is at GET priors.trade/api/jobs.
  • newfind_sellers' rule: a merchant registered on the Priors facilitator whose 402 answers at its own https address in USDG on chain 4663, paid to the address it registered, checked by GET and never paid. Each seller comes with its endpoints, what each 402 asked and when, its last paid use, its payment address, and its Priors record when that address is an agent's. Sellers' own words come as data, not instructions.
  • newGET priors.trade/api/registry?id=<id> answers for any ERC-8004 identity on Robinhood Chain, with or without a Priors record: its name, its owner, where it comes from and whether it has a record. Without an id it gives how many there are, by origin.
  • changedThe hosted MCP now has 24 tools. mcp.priors.trade
appscoreapipriors.trade/agent · Owners/api/agent-record

An agent's page says who has held it, and what customers paid it

Each agent's page on priors.trade now has an Owners panel: every owner from the ERC-8004 registry's transfers, with their dates and whether they registered the agent or it changed hands, and the owner line says since when. It tells the loans repaid with this owner apart from every owner's. A new line under the agent's four figures shows what customers paid it in the last 30 days and how many paid, counting payments to the wallet it declared, its own wallets left out.

details
  • new/api/check gives each record's ownerSince and loansRepaidByOwner, and GET priors.trade/api/agent-record?agent=<id> gives every owner and the loans told for all owners and for the current one. Shown, never scored: Priors Score v2 already counts an agent's record from its current owner's first loan.
  • newThe hosted MCP's agent_record and score_of say since when the owner has held the agent, and agent_record gives what customers paid it in the last 30 days.
  • changedThe page says which count is whose: the on-chain score counts every owner's loans, and Priors Score v2 the current owner's.
  • sourcedocs/CHECK-API.md (commit 38f4c80) · every agent's page from priors.trade/live
appgo.priors.trade · Savings

Savings shows what your savings earned

Go mode's Savings now shows Earned since you saved next to Saved: what your USDG in the Steakhouse USDG vault on Morpho earned since the save that began your current savings. It comes from the vault's own records: what your savings are worth now, plus what you withdrew, less what you saved. It moves with Morpho's variable rate, and a loss in the vault lowers it.

details
  • newRead only: no new contract, no fee and nothing sent. The vault's deposit and withdrawal events for your account are read along with History, and the stretches already read are kept in your browser. If the records don't match your savings, it says so and reads them again every few minutes.
appgo.priors.trade · Add USDG · From another network

Add USDG from another network

Go mode's Add USDG now has From another network, beside From Base. Send USDC from your own wallet on Ethereum, Arbitrum, Optimism, Polygon, Avalanche, Linea, Unichain, World Chain, Ink, HyperEVM, Monad or Arc: Across converts it, and it arrives in your account as USDG, usually within seconds. Your wallet asks you to approve the amount for Across, then to send it, and you pay that network's gas.

details
  • newBefore you send, the page shows about how much USDG arrives and Across's fee, and it asks Across again if its quote moved. Deposits are listed with their status until they arrive. If Across can't deliver one in time, the USDC goes back to your wallet on that network within a few hours.
  • securityThe gas gate reads Across's quote and checks its terms. The page builds the approval, for the amount only, and the deposit itself from those terms, never from a transaction Across hands over, and Priors holds nothing for you on the way.
stockscontractsStockVault · 0xbEcd…02B6PT-USDG · 0x6982…66ef

PT-USDG backs agent lines

Pendle's PT-USDG now backs a line the way a stock token does. An agent's owner deposits it in the stock vault, and the vault lends USDG against 60% of its value, with one 1,000 USDG cap across all PT-USDG lines. New PT-USDG credit opened by itself at 17:37:53 UTC, once its feed had 14 days of rounds; nothing was signed for it that day.

details
  • newGo mode turns Deposit on by itself once the vault's lendStatus for PT-USDG reads 0, which it has since 17:37:53 UTC. Repaying, closing and settling were never held.
  • sourceStockVault · PT-USDG · the listing at 60% with its cap, tx 0x614a…e545
stockscontractssecurityStockVault · upgrade to 0xd303…2c72

A stock default waits for the vault's tape instead of taking the whole deposit

When a stock token's tape was more than 6 rounds behind its feed, the vault treated it as a lending hold, and a default on a lending hold seizes every token of the position. So a default marked, repaid into or settled while the tape lagged took the depositor's whole deposit, where it should take what is owed plus 20% and return the rest. Now a tape behind is a reason of its own: the seizure waits, the whole deposit with it, until anyone records the tape, and then settle takes only its share.

details
  • securityThe Safe upgraded the stock vault 0xbEcd…02B6 to implementation 0xd303…2c72 through the timelock (tx, block 91,710,152). Reported privately by @sonson0910 as GHSA-q29p-rp35-p8v2 (Low), published on 2026-10-22. One stock position was open, its only loan due on 2026-11-16, so none could be defaulted before the fix.
  • fixA round that cannot be read now counts from the UTC day it is recorded, however the recording calls are split; before, splitting them could hold new credit up to 14 days longer. The tape keeps 21 days and compares the window's first day with the feed's answer in force when the window began.
  • sourceGHSA-q29p-rp35-p8v2 · docs/SECURITY-v2.md (SV-19)
apppriors.trade · go.priors.trade · every page

One look on every page, our own dropdown, and Jobs in the sidebar

The design Jobs was built in now covers Go mode, the account pages and the public pages, in light and dark. Every list you pick from, like a loan's term, an agent or Jobs' Sort, opens our own dropdown instead of the browser's, and the language list takes the same look. In Go mode, Jobs is its own item in the sidebar, right under Tools, and Tools keeps Use tools and Sell your API.

details
  • newThe dropdown works as a select does: with a mouse, a finger or the keys (arrows, Enter, Esc), with rows 44 px tall on a phone. The page's own select stays underneath, so forms, labels and the page's own scripts work as before.
  • changedJobs sits under Tools in the Payments group, and in the phone's More drawer. A link to a job, a kind or a service still opens it. Builder mode's section strip has Jobs after Tools, and the Guide adds Open Jobs.
  • changedButtons are square with brass ticks on hover, tabs are engraved, radios and checkboxes are small squares, and arrows and checks are drawn in pixels. Nothing a button or a link does has changed.
appmcppriors.trade/chatmcp.priors.trade

Chat with your own AI in Builder mode

Builder mode's chat page is now on priors.trade/chat. Connect the AI you use, through OpenRouter's sign-in or an Anthropic or OpenAI key that stays in your browser, and the wallet that owns your agent. Your AI reads Priors and prepares borrows and repayments, and your wallet signs each one after you press Confirm on it.

details
  • newThe page is its own MCP client: it reads the hosted MCP's tools from the browser and offers them to the model, the same way for OpenRouter, Anthropic and OpenAI. The key goes only to the provider you chose; "Forget key" removes it.
  • newA borrow or a repayment the model proposes shows as a card with the agent, the amount, the term and the wallet paid. It is checked first: the wallet must own the agent or be its delegate, Priors must accept it, and the pool's own quote caps the fee. Nothing is sent before your click.
  • newClaude and ChatGPT subscriptions cannot be linked to another site: Anthropic forbids it, and OpenAI keeps it to a waitlist. To use them, add the Priors MCP to Claude or ChatGPT.
  • sourceChat with your AI · mcp.priors.trade
appx402go.priors.trade · Tools · Jobs

Jobs: paid work your agent can take on its line

Go mode's Tools now has Jobs: 50 paid jobs in 8 kinds, from checking agents before a deal to a daily pool brief. Each one shows the tools it pays for and what each costs, the loan it needs and what you keep of what the client pays. The agent borrows on its line, pays each tool per use from its own wallet, gets paid through its own API and repays. The jobs it can run today are marked Live now, and the rest read Coming next.

details
  • newCopy for my AI hands a live job's brief to any agent that has the Priors MCP. It pays each tool with pay_url, asks you for a loan with request_borrow when its wallet is short, and repays with request_repay once the job is paid. You approve each loan in Go mode.
  • newEach kind, and Services, has its own tab with its count, and every view shows 12 cards at a time (6 on a phone), with search and Sort. A job opens in a sheet: its state, its figures, how it runs, what it uses and its cost.
  • newEach kind and each job has its own drawn mark, and each service shows its own logo where it has one. A link opens a kind, a service or a job again, in all five languages.
appgo.priors.trade · account menu · Profile

Every account has a profile, and anyone's opens by its address

The account menu now opens your profile: your tree, your total in dollars with $PRIORS beside it, a bar of where your money sits, then Holdings, Activity and Agents with their public record. Any address opens the same way from a link, read only: go.priors.trade/account?profile= and the address. Every address is shown the same way.

details
  • newProfile, View profile and Share profile in the account menu. The owner on the agent panel, Seats, stock lines, All agents' search and the pool feed each open that address's profile.
  • changedIt shows only what the chain and Priors' public data already show, and it moves no money.
appscorego.priors.trade · agent panel/api/check

Each agent's card shows its next level and what's left

Go mode's agent panel now reads "Next level" and lists each condition with what the agent has and what it needs. On your own agent it also says what moves each one. The score and the level stay as they were: Score v2 now also says where an agent goes next.

details
  • newThe next level and each condition's have and need come with every record check, as scoreV2.next in /api/check.
stockscontractssecurityStockVault · upgrade to 0xcD1A…BAa9

The stock vault's lending hold reads every round of its 14 days

New credit on a stock token is held when its feed moves more than 25% against any round of the last 14 days. The vault used to compare the latest quote with a sample of past rounds (1, 2, 4 and so on up to 4,096 back), so a round between two samples could go unseen. It now keeps a tape of each UTC day's lowest and highest quote for each feed, and compares the latest quote with every round of the window.

details
  • securityThe Safe upgraded the stock vault 0xbEcd…02B6 through the timelock (tx), 05:41 UTC. Reported privately as GHSA-7gq2-77ph-mw6j (Low). Open positions and settings are unchanged.
  • changedAnyone can record a feed's rounds on the tape 0xa09C…b593, which only reads the feed, and Priors' keeper checks every 10 minutes. The vault reads up to 6 unrecorded rounds itself; with more, new credit on that token waits until they are recorded. A day on the tape counts whole, so a hold can last up to a day longer. Repaying and closing never wait on the tape.
  • sourceGHSA-7gq2-77ph-mw6j · docs/SECURITY-v2.md (SV-18)
contractssecuritySeatVaultV5 · V5-3

SeatVaultV5's keeper sales could pay leavers more than the day's budget counts

A private report, rated Low, is about SeatVaultV5, whose libraries are fixed at deployment, so docs/SECURITY-v2.md now describes it and how far it goes (V5-3). V5's keeper sells, for USDG, the $PRIORS of those leaving the vault. Each sale was sized and counted against the day's sell budget at the lower of the pool's spot rate and its 24-hour median, while the pool pays at spot. With spot above the median, a day's sales could pay leavers more USDG than the budget recorded, by about the gap.

details
  • securityV5-3 (Low, GHSA-94g8-wm48-44v8, credited to @everforyou): on a fork of the live V5 with spot 12.5% above the median, a day's keeper sales paid 1,192.95 USDG against a budget of 1,117.35 USDG, and 1,105.37 USDG was recorded. Each leaver was paid the pool's rate for its own $PRIORS, and no line, root, lender or buffer was reached. Below the median, the falling market the budget bounds, the count was already at spot. docs/SECURITY-v2.md says no V5 exit had been queued or sold since its deployment.
  • changedIt stays open in SeatVaultV5 0xC999…39fD (root #8762) until the next engine set: its libraries are linked at deployment, and the SwapLimiter and BuyAndBack name it once. The fix, ready with its regression test for the next V5, sizes and counts a keeper sale at spot, and keeps the leaver's floor at the lower of spot and the median.
  • sourceGHSA-94g8-wm48-44v8 · docs/SECURITY-v2.md (V5-3, commit df7f944)
appgo.priors.trade · every tab

Go mode moves with what's true

A figure lights once when its value changes, and new activity rows slide in. The Launchpad's done steps draw in, and its mark grows a pixel bonsai tier per step. The stocks dot is live only while a stock's quote is under 15 minutes old, and the pool's dot is green while its figures are fresh. Nothing moves with reduced motion turned on, and no figure moves or lights with balances hidden.

apppriors.trade/live · Capital

The live page's Capital counts what DefiLlama counts

Priors is listed on DefiLlama. The Capital card on priors.trade/live adds two rows on the same perimeters: USDG held by Priors' contracts, which is DefiLlama's TVL, and $PRIORS in the seat vaults, its staking. Loans out count there as borrowed, not as TVL.

details
x402sdk@priors/x402 0.8.0

@priors/x402 0.8.0: pay a seller in Keyring's catalog with one USDG payment

@priors/x402 0.8.0, on npm since 18:06 UTC, adds payViaGateway. Most sellers in Vantis' Keyring catalog are paid in USDC on Base. Keyring takes one USDG payment on Robinhood Chain, pays the seller and relays its answer, so an agent's Priors line can cover such a seller with no float on Base. It is off unless createPayer({ gateway }) names it, and was tested against a mock gateway only.

details
  • newBefore anything is signed or borrowed, the seller's record must name the resource and method asked for. Keyring's quote must be in USDG on Robinhood Chain, within maxPrice, and within gateway.maxFeeBps (1000 by default) over what the seller lists. The gateway's 402 may ask no more than the quote, on Robinhood Chain only, and must pay gateway.payTo when it is set.
  • newThen it pays as pay() pays any Robinhood Chain merchant: the balance, topUp, a loan of only the shortfall within maxBorrow, and one signature, in the same one-at-a-time queue. Each refusal has a code of its own, such as GATEWAY_FEE_TOO_HIGH or GATEWAY_PAYTO_MISMATCH.
  • changedNothing else in the package changed, and its exports have no new names. On 21 October Keyring's live gateway settled none of the payments sent to it (@priors/mcp 0.10.1).
  • sourcenpm: @priors/x402 · packages/x402/CHANGELOG.md · commit 8f77db0
appscorepriors.trade/agent · Sharego.priors.trade · agent panel · Share

Share an agent's record as a card or a video

Each agent's page on priors.trade now has a Share panel where Badge was. It shows the agent's card, the same picture its link shows on X, then plays its record on it once: its loans repaid climb along a line, day by day, while its tree turns slowly once, and the film ends on the card. Share on X opens a post with the agent's name, its loans repaid, its defaults and its link. Download video saves the film and Download card saves the picture. On a phone the panel comes right after the agent's four figures, and Share video hands the film to the phone's share sheet. Go mode's agent panel has the same Share button, in all five languages.

details
  • newThe film is drawn in the browser with the same code that draws the card, so it starts and ends on the card exactly. It runs 13 seconds, silent, and loops without a jump. It saves as an MP4 where the browser can make one, and as a GIF elsewhere.
  • newIt plays only a record that adds up to the card, checked against the record now (/api/check) and the card the link shows (/api/card/<id>.json). An agent with no loan repaid yet, or a record that can't be checked at that moment, shares the card alone, and the panel says why. Every agent is shown the same way: priors.trade/live
  • changedCopy badge moved into Share, under "Badge for a README", and works as before. With reduced motion turned on, the card stays still.
appstockscontractspriors.trade · go.priors.trade · docs

The Protocol page, the Guide and the help pages say what the protocol does today

We checked every page against the chain and the live app, and corrected what had fallen behind. The Protocol page now covers the fair default on stock lines, Score v2, Back agents and the treasury's settings as the contracts have them. Go mode's Guide says stock lines back 25% to 70% of a token's value, and that a default keeps what is owed plus 20% and gives the rest back. The lender, stocks, builder and x402 pages, Go mode's help and agent001's answers say the same facts, in all five languages.

details
  • fixProtocol: Stage 1 is on (BuyAndBack buys $PRIORS, placing it behind agents is next), Back agents needs no record to start and takes USDG, the treasury's 5 USDG bond and its weekly cap of 1,000 USDG, the 25 USDG sweep minimum, a default barring the owner's wallet, the paid score API beside the free record check, and section 09 listing every contract the page describes. priors.trade/protocol
  • fixStocks: a fall in a token's value never sells it, and only lowers what the agent can draw. The fair default with its exceptions, the 26-hour and 1-day holds, and the fee due in full even on an early repayment. A token whose line cap is 0 now reads as taking no new lines. priors.trade/stocks
  • fixParticipate: option 2 is now backing your own agent in Go mode, from $25 to $50 up to $500 in steps, with $PRIORS or USDG. The earlier growth seats have their own section, and their controls stay for any seat still open. priors.trade/participate
  • fixGo mode's help: what a default costs on each kind of line, the Back agents step rule as the contract has it (a step up needs no loan overdue now), the transfer-out wording and Relay's fee. agent001 and Priors AI answer with the same facts.
  • fixBuilders and the x402 pages: the hosted MCP's 20 tools, the free record check in @priors/x402, the facilitator's fee, and credit statements posted when one is due. priors.trade/builders
apppriors.trade · go.priors.trade · README

Every line is backed, and every page says so

Every Priors line is backed in USDG by its backer's stake, locked in the pool: the treasury's, a sponsor's or a Priors vault's. A default is paid in full by that backer. The site, Go mode in five languages and the README now say it that way, and the older words for a line with no backing are gone.

details
  • changedThe pool's hint in Go mode notes that the contracts are experimental, in all five languages. The first pool's design note is labelled as v1. README
appgo.priors.trade · every tab

Go mode's buttons sit where you need them

We went through every screen of Go mode and moved buttons to where your hand already is. Field helpers like Max are as tall as their field. A stock line's three actions sit together. Lend and Savings use one button size. The deposit sheet's Cancel sits beside its main button. On a phone, the main move gets its own line.

details
  • changedTransfer out's Remove is a quiet link on the address's line, and it asks first. A new address still waits 24 hours.
  • changedSeveral loans keep Repay all, now on the loans' own Repay row. The X link sheet's Cancel reads Close once a save went through. The start page's "Or link your wallet" uses plain buttons, so Create agent stays the one filled button.
  • fixEvery tap target is at least 44 px and none reaches over the control next to it. The settings drawer no longer scrolls sideways on a phone.
appgo.priors.trade · agent001 tab · settings

Priors AI's credit and agent001's top-up, in one clear place

The Priors AI section in agent001's settings now shows your credit and what today used. The $0.50 trial is one row with Try it, and adding credit is one row: amount, asset, button. agent001's auto top-up is a card of its own, with its setting in an On or Off pill and the monthly cap in dollars. Every answer shows on the section's own line, right under its buttons.

details
  • changedTurn on, Save changes and Turn off are each sent at once and read back, so the page never shows a setting it has not saved.
appx402go.priors.trade · Tools · Connect your AI

Connect your AI shows each app's own icon

The tiles in Connect your AI now show the real mark of each app: Claude and Claude Code, ChatGPT and Codex, Cursor and VS Code, in light and dark. Priors' own report API shows the Priors tree. Every other service keeps its letter.

details
  • changedEach icon is the company's official file, served from priors.trade itself. If one fails to load, the app's letters show instead. go.priors.trade/account
mcpsdksecurity@priors/mcp 0.9.3

@priors/mcp 0.9.3: a PT-USDG trade whose answer is lost is never said to have done nothing

@priors/mcp 0.9.3, on npm since 16:41 UTC, applies the rule the v2 SDK got the same day for a lost answer (C-13) to its PT-USDG trades. A trade that may have been sent is said to be so, and a buy stays counted against PRIORS_MAX_PT_TOTAL_USD.

details
  • securitypt_buy, pt_sell and pt_redeem sign each step before sending it and, after a failed broadcast, ask the node about its hash: a step the node shows mined goes on, and one it shows pending is waited for. A node's "insufficient funds" was always taken as a refusal, though a node can also answer it to a retried request after the first was taken; the buy was then left out of PRIORS_MAX_PT_TOTAL_USD and given back as nothing sent. Now any failure but a refusal with no trace of the transaction says the trade may have been sent, and asks to check pt_position and wallet_balance before trying again. Waiting for a receipt is bounded at 3 minutes.
  • changedThe same change is in the SDK's sdk/pt-usdg.mjs, whose ptBuy, ptSell and ptRedeem throw TX_UNCONFIRMED, with the hash and the steps done before, instead of a bare error.
  • sourcenpm: @priors/mcp · packages/mcp/CHANGELOG.md
sdksecuritypriors-v2 · sdk/priors-v2.mjs

A borrow whose answer is lost is never said to have done nothing

A private report, rated Low, found that the v2 SDK's borrow, and so priors-v2 borrow, let a lost answer through as a bare network error once the loan could have been taken. Running borrow again then opened a second loan for one intended borrow, and nothing said the first might exist. The SDK and the CLI are fixed in the public repository since 10:26 UTC.

details
  • securityC-13 (Low, GHSA-g5cv-cpwp-756w, credited to @heloferr): every write the SDK sends is signed before it is sent, so its hash is known first, and after a failed send the node is asked about that hash. A refusal before the transaction is taken, or a revert, is an ordinary error: nothing was done. Any other failure once it may have been taken throws TX_UNCONFIRMED, or BORROW_UNCONFIRMED for a borrow, with the amount and the hash. It mattered only on a line with room for both loans: on a $5 treasury line the pool refuses the second before anything is sent.
  • newpriors-v2 records every transaction it signs before sending it, in a file of its own under ~/.local/state/priors/unconfirmed/. borrow and join refuse while a record is unresolved, and priors-v2 tx settles each one and removes it once final.
  • sourceGHSA-g5cv-cpwp-756w · docs/SECURITY-v2.md (C-13) · commit 5288dfb · scripts/test-sdk-v2-borrow-lost.mjs
contractssecurityCreditPoolV2 · O-6

A fresh deposit into an aged lender wallet can skip the pool's exit fee

A private report, rated Low, is about the pool, which cannot be upgraded, so docs/SECURITY-v2.md now describes it and how far it goes (O-6). A lender's wallet has one clock for all its deposits, and withdraw charges the 0.5% exit fee while that clock is under seven days old. A fresh deposit into a wallet whose older deposits are well past seven days can leave the clock past seven days, so money only seconds old leaves with no fee. It is O-5 the other way round.

details
  • securityO-6 (Low, GHSA-2899-mwvp-gpvc, credited to @destinyae): the clock stays past seven days while the new deposit is at most H·(age − 7 days)/7 days for H shares of that age, 56 times the position at 400 days. Around a repayment or anyone's markDefault, such a wallet takes its share of the fee that lands, as a fresh root does with no fee (F-2, SO-2): at the pool's live size, 1.08 USDG of the 2.5 USDG a 500 USDG, 30-day repayment brings, and 2.26 of a default's 5. Yield only, never principal. Each use spends the older deposits' age, since withdraw never moves the clock.
  • changedIt stays until the next pool, which is to age deposits in tranches and closes O-5 and O-6 both: the clock, the seven days and the fee are fixed in the pool, and no setting reaches them. test/Pvr2899.t.sol and test/Pvr2899Fork.t.sol show it.
  • sourceGHSA-2899-mwvp-gpvc · docs/SECURITY-v2.md (O-6, commit 661cb16)
stockscontractsStockVault · upgrade to 0x02f0…af5d

A stock line's default keeps what is owed plus 20%, and gives the rest back

Until now a default on a stock line kept the whole deposit, however much it was worth. The stock vault now keeps tokens worth what the agent owes (the defaulted loans' principal and fees) plus a 20% buffer, valued at the token's last usable Chainlink quote, and sends the rest back to the depositor. If the token can't be valued that day, or the deposit is worth less, it keeps all of it. A falling stock never sells a deposit. The deposit sheet and the MCP's stock_line_request say the rule in plain words.

details
  • changedThe Safe upgraded the vault through the timelock (tx). The source matches the deployed code byte for byte. Open positions, settings and stake are unchanged.
  • changedA rest the token won't send right away stays owed to the depositor, and anyone can send it once the token moves.
mcpsdksecurity@priors/mcp 0.9.2mcp.priors.trade · find_services

@priors/mcp 0.9.2: a merchant's text stays inside its fence, and Autopay's budget keeps its bound

Two private reports, each rated Low, are fixed in @priors/mcp 0.9.2, on npm since 17:30 UTC. The hosted MCP has the fence's fix since the same day. Versions up to 0.9.1 were affected by both, and the advisories were published on 14 October.

details
  • securityA merchant could still spell the fence that keeps its text apart from the server's own lines: an invisible separator (U+180E, U+2063) in the fence's keyword and look-alike brackets got past the cleaning, so it could close the fence early and write lines that read as the server's. Every line inside the fence now starts with "│ ", whatever line break the merchant writes, so none of its lines stands outside. Its text is read as a reader would read it (character references decoded, look-alikes folded) before a marker is rewritten, every third-party string outside the fence is one line cleaned the same way, and a merchant's link is given exactly as written or not at all (GHSA-jqm8-qjqx-x2fv, Low, credited to @bangsing).
  • securityautopay_on approved any budget_usd at or above the limit per loan, 1,000,000 USDG on a 25 USDG limit, while the README and the tool said 4 × the limit and never unlimited. A larger budget is now refused before anything is sent. When it was reported, no AutoRepay contract was deployed on Robinhood Chain, so autopay_on refused before anything was signed unless PRIORS_AUTOREPAY named one. An allowance approved above the bound before stays until autopay_off with clear_budget: true (P-45, GHSA-c5hq-4hph-ff2v, Low, credited to @heloferr).
  • changedThe hosted server's find_services uses the same fence code. 0.9.2 runs on @priors/x402 0.7.1.
  • sourceGHSA-jqm8-qjqx-x2fv · GHSA-c5hq-4hph-ff2v · docs/SECURITY-v2.md (P-4 and P-5, P-45) · npm: @priors/mcp · packages/mcp/CHANGELOG.md
stocksmcpx402sdk@priors/mcp 0.9.1@priors/x402 0.7.1

@priors/mcp 0.9.1 and @priors/x402 0.7.1: stock line requests the vault takes, and a record check that fails closed

@priors/mcp 0.9.1, on npm since 08:08 UTC, fixes how stock_line_request sizes and checks a request, so its link opens a deposit the vault takes. @priors/x402 0.7.1, on npm since 08:09 UTC and under 0.9.1, no longer passes a payer when the record service's answer holds no record.

details
  • fixstock_line_request checks the token's cap and the week's room against the line the filled deposit opens, about 1.3 times the line asked for. A 100 USDG request with 110 USDG of room got a link to a deposit that opens 130 USDG, which the vault refuses. Such a request is now refused, and the answer names the largest line that fits.
  • fixIt sizes a named agent at its own loan-to-value, the vault's ltvOf(agent, token): the token's own plus the agent's record bonus. At the token's own, an agent with a bonus was asked for more of the token than its line needs, about 25% more at 75% against 60%.
  • fixWithout agent_id and with a wallet configured, a lookup that fails (a wallet that owns several identities or none, a key that can't be used) is a tool error that asks for agent_id, no longer a link to a new agent's deposit, where the owner could fund another identity. An agent whose owner has a default marked is refused, as StockVault.open refuses it.
  • fix@priors/x402 0.7.1: with the API source, an HTTP 200 whose body was not a check API answer ({}, an error, an entry with no record) read as a payer Priors does not know, which the default policy accepts. A degraded record service could then let a defaulted payer through @priors/x402/check and recordGate. Such a body is now a record that cannot be read: check answers 503 with Retry-After (or serves, with failOpen), and recordGate refuses the payment.
  • fix@priors/x402 0.7.1, chain source: when the registry read of the named agent's owner fails, the record cannot be read. It was judged without that owner's default mark, so the key of a marked owner's agent could pass refuseDefaulted.
  • sourcenpm: @priors/mcp · npm: @priors/x402 · packages/mcp/CHANGELOG.md · packages/x402/CHANGELOG.md
appgo.priors.trade · sign-in

Go mode is open to everyone

Any Google account can now sign in to Go mode. The closed list Go mode opened with on 1 October is over. You still sign in with Google, with nothing to write down, and Priors pays the gas.

details
  • changedThe sign-in card reads "Sign-in is open to everyone. Follow @priors_trade for news." in English, French, Spanish, Portuguese and Chinese. It said sign-in was opening in waves, to a closed list. go.priors.trade/account
contractssecurityTreasurySponsorV4 · setRules (minQualified)

An agent's 5 USDG bond now stays until its line is closed

The Safe raised the number of qualified loans the treasury asks for (minQualified) from 3 to 1,000,000, and the bond contract reads the same number. So a bond no longer comes back after 3 qualified loans while the agent's $5 line is still open. That let an owner take the bond back, then draw the line and default without losing anything. The bond now comes back once the agent has no line and no open loan, at least 4 days after it was posted. In Go mode, the owner presses Close line and take the bond back on the agent's card, and the bond arrives by itself within about 30 minutes.

details
  • securityTreasury v4 0x0c50…D573 reads minQualified 1,000,000, up from 3 (tx, block 86,357,797, 03:27 UTC). Its other rules did not change. No bond had come back after 3 qualified loans before the change.
  • changedInviteBond 0x8BE4…3275 releases a bond once the agent has no line, no open loan and no default, and 4 days have passed since the bond was posted. A default still sends the bond to the Safe.
  • changedRaises are on hold too: a raise asks for the same number of qualified loans, and since 17:46 UTC the treasury's second line is $5, so a raise would add nothing. Go mode and the agent pages read that number live and say so.
  • sourcedocs/AGENTS.md (commit 39e90ac)
appcontractsTreasurySponsorV4 · setRules

192 more first lines this week

The treasury's weekly cap of new first lines is $1,000 until 16 October 2026 at 02:16 UTC, then back to $100 a week. 907 USDG of new stake backs them. The raise to $25 stays on hold.

details
  • changedTreasury v4 0x0c50…D573 reads epochCap 1,000 USDG and secondLine 5 USDG, down from 25, so no raise opens (tx). Every other rule is unchanged.
appgo.priors.trade · agent001 tab · Priors AI

agent001 answers in your own words, with no AI key of your own

If you haven't connected your own model, the agent001 tab now uses Priors AI. Before, a question in your own words needed your own OpenRouter, Anthropic or OpenAI key, and without one only the presets worked. Each question costs what the model costs Priors, plus 20%, paid from Priors AI credit you add in USDG or $PRIORS. If your agent posted its bond or repaid a loan, $0.50 of credit is offered once. It answers only questions about Priors, up to $1 a day per account, and an off-topic question is refused at no cost.

details
  • newThe tab's settings show your credit and add to it: 1 to 100 USDG sent to Priors' Safe 0x20c6…3fD5, or $PRIORS, half burned and half sent to the Safe. The credit is added once the chain confirms the transfer, and Priors pays the gas for up to 5 top-ups per account a day. agent001 can also top up by itself, up to a monthly cap you set. This is off by default.
  • changedA model you connect in the tab's settings takes over, and Forget key switches back to Priors AI. While Priors AI answers, the tab's chip reads "Priors AI" and your credit.
  • securityThe model's key stays on Priors' server. The page reaches Priors AI at go.priors.trade/ai with your sign-in, and a retried question is billed once.
  • changedThe privacy page and the consent window (version 2026-10-12, so it asks again) name Priors AI and OpenRouter, which runs its model. Messages go through Priors to OpenRouter with data collection off. No conversation history is kept, and the latest answers are kept for a day at most. priors.trade/privacy
  • fixSince the evening, its guard no longer refuses questions about Priors by mistake.
stockscontractsStockVault · setPriceGuard, setAsset, setRecordBonus

Stock lines: SGOV backs 70% of its value, SPY and QQQ 60%

The Safe retuned the stock vault. A Treasury fund (SGOV) now backs a line at 70% of its value, the code's maximum, and the two index funds at 60%. A split or dividend now holds new credit on that stock for one day instead of fourteen, so SGOV, TSM and ORCL lend again. The two names with the thinnest exits take no new line, and three others share a smaller cap. A record of repaid treasury loans now earns its loan-to-value bonus ten times sooner.

details
  • changedThe wait after a multiplier change is 1 day; a move of 25% within 14 days still holds new credit (tx).
  • changedLoan-to-value: SGOV 70%, SPY 60%, QQQ 60%. PT-USDG 60%, and still no new credit on it until its feed has 14 days of history, 19 October 2026.
  • changedNo new line on CLSK and RGTI; IONQ, RKLB and ASML lines share a $500 cap each (tx).
  • changedThe record bonus: a point per 0.05 USDG of treasury fees paid, up to 15 (tx).
appstocksgo.priors.trade · Stock lines · deposit sheet

Open a stock line by the line you need

On Stock lines, the deposit sheet now asks for the line you need, in dollars, and fills in how much stock to deposit. That is what the line needs at the stock's loan-to-value, times 1.3 for room to fall. If you hold enough for the line but not the extra room, it fills in all you hold. If you hold less than the line needs, it says how much more to buy. The sheet says how much you keep and what borrowing the whole line costs for a day and for a week, in cents. It also says what the vault keeps on a default, read from the live vault. Nothing moves until you press Deposit and open line.

details
  • newLine you need fills in the deposit: the line ÷ the stock's loan-to-value × 1.3, so what the agent can draw holds through a 23% fall. If you hold too little, the sheet says how much more to buy and send to the account.
  • newWhat a default keeps today: the whole deposit, once a loan is 3 days past due. A default also stops new lines for every agent of the account.
  • newA request link from an agent, made by stock_line_request, opens the sheet with that agent, stock and line already picked, and the sheet says the agent asked for it. go.priors.trade/account
  • fixThe note under the stock list said a fall could close your line. It now says a fall in the stock never sells your tokens: it lowers what your agent can draw.
stocksmcpsdk@priors/mcp 0.9.0mcp.priors.trade · stock_line_request

An agent can ask its owner for a stock line

When an agent's line is too small for a task, stock_line_request asks its owner for a line backed by a Robinhood stock token the owner holds. It checks that the stock takes new lines now and that the agent can take one. Then it sizes the deposit, gives the cost in cents for a day and a week, and says what a default would keep. Its answer carries a Go mode link to the owner's deposit sheet, already filled in. It holds no key and sends nothing, so nothing moves until the owner deposits. It is in @priors/mcp 0.9.0 and on mcp.priors.trade.

details
  • newThe deposit is the line ÷ the stock's loan-to-value × 1.3, as in the Go mode sheet. Borrowing a whole 100 USDG line costs about $0.03 for a day or $0.23 for a week (1% per 30 days).
  • newBefore it answers, it checks the stock's holds and caps and the vault's room this week, and it refuses an agent that has defaulted. What a default keeps is read from the live vault: today, the whole deposit, once a loan is 3 days past due. A default also stops new lines for every agent of that owner.
  • changedcredit_status points to it for an agent without a stock line. 0.9.0 runs on @priors/x402 0.7.0 and includes the fixes of 0.8.5. Go mode opens the filled-in sheet from the link since 21:15 UTC.
  • changedThe site, the hosted MCP's guide and x402.priors.trade hand out @priors/mcp@0.9.0, and the official MCP Registry lists 0.9.0. /api/stocks now gives each stock's lineCap.
  • sourcenpm: @priors/mcp · mcp.priors.trade · packages/mcp/CHANGELOG.md · packages/mcp/src/stock-line.mjs · commit f51ce2e
x402sdk@priors/x402 0.7.0

@priors/x402 0.7.0: check a payer's record in one line before any x402 paywall

@priors/x402/check checks a payer's Priors record in front of an x402 paywall, whatever runs it. It reads the payer from the payment header. A payer whose agent defaulted gets a 403 before the paywall checks anything, and a request with no payment header goes on to the paywall's 402 as before. The rest of the package is unchanged.

details
  • newrequireRecord for Express, Connect and node:http, honoRecord for Hono, withRecord for fetch handlers (Cloudflare Workers, Next route handlers, Bun) and checkRequest for any other stack. The payer comes from the v2 PAYMENT-SIGNATURE or v1 X-PAYMENT header.
  • newOptions: refuseDefaulted (on by default), minRepaid and minScore. A refusal is a 403 with an error code: priors_payer_defaulted, priors_record_too_short, priors_score_too_low, or priors_payer_unknown when the header doesn't name exactly one payer. It is never a 402, so it never asks for a payment.
  • newIf the record can't be read, it answers 503 with Retry-After, unless failOpen is set. It can only refuse a request: a forged payer still fails the paywall's own check afterwards.
  • sourcenpm: @priors/x402 · packages/x402/CHANGELOG.md · examples/check-record (a node:http demo merchant) · commit 2385393
mcpsdksecurity@priors/mcp 0.8.5

@priors/mcp 0.8.5: daily and session limits count money still in flight

Two private reports, each rated Low, were about the limits an owner sets on what an agent can borrow and spend. Both are fixed in @priors/mcp 0.8.5, on npm since 04:09 UTC and handed out by the hosted MCP from about 04:15 and by the site from about 05:20. 0.9.0, released that evening, includes both fixes.

details
  • securityThe daily limits (PRIORS_MAX_BORROW_DAY_USD, PRIORS_MAX_SPEND_DAY_USD) counted a call in the UTC day it started. A borrow sent at 23:59:59 that landed after midnight was invisible to the new day's limit and to credit_status's "Today", so one day could carry up to twice its limit. A call's money is now counted in the day it ends. While a call is still running, every process counts it in each day after the one it started, and a call cut short by a crash stays counted for the day it started and the two after (P-43, Low, GHSA-266h-jfr9-42cx). Versions 0.8.0 to 0.8.4 were affected.
  • securityfund_base checked PRIORS_MAX_BORROW_TOTAL_USD and PRIORS_MAX_BRIDGE_TOTAL_USD, then waited on Base reads before counting. A second call made during that wait could pass both caps beside the one already running. fund_base now counts right after the check, as borrow and pay_url do, and gives the amount back if the call is refused (P-44, Low, GHSA-24qq-9p83-8798). Versions 0.7.0 to 0.8.4 with Base turned on were affected.
  • changed0.8.5 runs on @priors/x402 0.6.5.
  • sourcenpm: @priors/mcp · docs/SECURITY-v2.md (P-43, P-44) · packages/mcp/CHANGELOG.md
apimcppriors.trade/api/desksmcp.priors.trade · desk_record

Every backer's record on the pool, in one free endpoint

priors.trade/api/desks lists every pool root, a backer whose own USDG stake stands behind the lines it vouches for. For each one it gives its age, its stake and the lines it vouches for now. It counts the loans it backed, how many were repaid (and of those, how many qualified or were late), how many are open now, and the defaults marked on chain. Its losses count every loan past its due date and grace that was not repaid, marked on chain or not. The hosted MCP's desk_record gives the same figures.

details
  • newGET priors.trade/api/desks needs no key and no account, and ?root=<id> answers for one root. Each answer names its block and the definitions it uses. A qualified loan follows the pool's own rule: repaid, and held for at least the loan's minimum scoring term of 7 days. A loss is principal plus fee.
  • newIt covers pool v2 loans, since each of those names the root behind it. It lists 15 roots today.
  • newdesk_record on mcp.priors.trade gives one root's figures, or those of the 20 with the most loans. The hosted MCP now has 20 tools.
appscorepriors.trade/agent · Copy badge

Copy an agent's badge for a README

Each agent's page on priors.trade now shows its live badge, with its score and loans repaid (red after a default), and a Copy badge button. The button puts Markdown on the clipboard: the badge image, linked to the agent's page. Go mode's agent panel has Copy badge too. If the browser blocks the clipboard, the Markdown is selected so you can copy it by hand.

details
  • newThe Markdown is [![Priors record](https://priors.trade/api/badge/<id>.svg)](https://priors.trade/agent?id=<id>), from the same /api/badge/<id>.svg as before. GitHub shows the badge. In all five languages. Every agent's page opens from priors.trade/live.
appgo.priors.trade · notifications@priors_agents_bot · /watch

Know when an agent is one loan from its next step

For an agent with a line on Back agents, Go mode's notifications and agent001 now say when it is one counted loan from its next step. They give that step's ceiling and the date its 14 days on the current step end. In Telegram, send /watch <agent id> to @priors_agents_bot. The chat then gets one message when that agent is one counted loan from its next step, and one when it moves up. The bot checks every half hour.

details
  • newA loan counts when it is at least half the step's ceiling, runs 8 to 10 days, and is repaid on time at least 7 days after it was taken. The bell, agent001 and the bot use the same sentence: "<agent> is one loan from the next step: <ceiling> USDG."
  • new/watching lists the chat's agents, 5 at most, and /unwatch <id> stops one. Records are public, so any agent can be watched.
contractssecurityTimelockController · updateDelay(0)

The timelock now has no waiting time

The protocol's timelock owns PoolSteward, the engines' settings and the stock vault's upgrade key. Its waiting time is now zero: Priors' Safe, where two of its three owners must sign, still schedules every change in public on chain, and the change can run as soon as it is scheduled. The stocks page and the protocol page say so.

details
  • changedThe timelock 0x5d98…F87c reads a minimum delay of 0, down from 48 hours, after its updateDelay(0) ran on 11 October 2026.
  • changedA stock vault upgrade, a PoolSteward change and a change to the engines' settings are each still a public transaction from the Safe. They no longer wait 48 hours before they can run.
appgo.priors.trade · Repay

Every date on a loan explains itself

On Home's Repay step, each part of the loan's timeline opens a short explanation on hover, focus or tap: before day 7, day 7 (from then a repayment counts as a week-long loan, which builds the agent's record), the best window to repay, the due date, the grace days after it, today and the countdown. Each uses the loan's own dates.

details
  • newThe hints open on hover, keyboard focus and tap, close on Escape, and are read out by screen readers. Their touch targets are 44 px.
  • fixOn a phone, a mark that would run into the one before it (Day 7 on a 30-day loan) moves to a second row, in every language.
appstocksgo.priors.trade · Home's stocks

Tap a stock on Home to open its backing page

Each row of Home's Stocks card opens Backing with that stock token already picked in the deposit form. When the stock feeds haven't moved for a day (the market is closed), the card says Market closed and shows a dash instead of 0.00%.

appgo.priors.trade · Back agents

Back agents, rebuilt: see the line before you confirm

Pick your agent, type an amount of your own $PRIORS, and the line steps from $25 to $500 show the line it opens before anything is sent. What you share (the fees the agent pays, in USDG, nothing promised) and the risk (three quarters of your $PRIORS behind it burns on a missed payment) each take one line. Below, every agent that repays is listed by its record, with search and sorting. Backing stays open to each agent's own owner.

details
  • changedA line backed by the owner's $PRIORS lends for 10 days: the backing vault counts loans of 8 to 10 days toward the next step, so every loan on it can count.
  • changedThe steps state the vault's rule: 3 loans of at least half the line, 8 to 10 days each, kept a week or more and repaid on time, plus 14 days at the step.
  • fixClosed seats say "New seats are closed." instead of a 78-digit number, and the help states the real risk of a missed payment.
appgo.priors.trade · agent001

agent001 answers "what next" and "how am I doing" itself

agent001 reads plain requests in English, Spanish, French, Portuguese and Chinese, answers "what next" and "how am I doing" from the account's own records, and drafts each move as a card with one main button. Nothing is sent until you approve it, and a card that may have been sent is never opened again.

appsecuritygo.priors.trade · errors

When something doesn't go through, the message sits next to its button

A failed borrow, repayment, transfer, line or backing now answers right under the button you pressed, in plain words: what happened, whether anything was sent, and what to do. Gas refusals and the pool's errors are worded, never shown as codes. A read the network didn't answer is tried again once by itself.

details
  • securityA send that got no answer reads "Not confirmed yet." and keeps its button off until the chain shows the result, or for 3 minutes, so a second press can't send it twice. History shows a Sending row meanwhile.
  • changedDaily limits say when they reset in your own time too, and a refusal that won't change on a second try has no Try again.
appgo.priors.trade · Start and agent cards

Setting up an agent: copy its key first, and add enough to repay

The Start page keeps you on the agent's key until it is copied, since every loan goes to that key's wallet. It asks for enough USDG to repay the agent's loan, not only the bond. Each agent's card now shows the USDG in the agent's own wallet, where its loans go.

appx402mcpgo.priors.trade · Tools

The x402 tab is now Tools

Tools lists what an agent can pay for per use, each with a plain description, what its endpoint actually charges in USDG and how often it was used. Give to my agent copies a ready instruction for your AI. Connect your AI walks through Claude, ChatGPT, Cursor and other apps, says which of them can pay, and keeps setup code behind Show setup code. Sell your API takes three steps.

appGo mode · Help and the Guide

Help and the Guide cover today's Go mode

Help and the Guide now explain linking an agent's X account, the daily limits, Add USDG from Base, Back agents and Tools, and what to do when something didn't go through. Go mode links @priors_trade.

appgo.priors.trade · sidebar and Home

Go mode's sidebar in groups, and the pool's figures at the top of Home

Go mode's sidebar keeps Home, Agents, agent001 and History at the top, then two named groups: Earn & back, and Payments. Transfer out moves into the account menu, and New agent leaves the sidebar, since Home's card and the Agents tab both have it. Home's top bar now shows the same figures as every other tab, above the card that takes an account from Add USDG to repaying its agent's loan.

details
  • changedThe sidebar: Home, Agents, agent001 and History, then "Earn & back" (Lend, Savings, Backing, Back agents) and "Payments" (x402), each group under its name, in all five languages.
  • changedTransfer out opens from the top of the account menu. New agent is no longer a sidebar item.
  • newHome's top bar shows Total repaid, Loans repaid, Borrowed now, Reserve, Bad debt and Agents, from the data API's totals and the pool's live reads, with the account's USDG balance and Add USDG, as on the other tabs.
appx402mcpGo mode · x402 tabmcp.priors.trade

Set up an agent in ElizaOS, OpenClaw, Hermes or any MCP app

The x402 tab's Use APIs pane has a new section, Where it runs, with blocks to copy for the program an agent runs in: ElizaOS, OpenClaw, Hermes or any MCP app. The recommended way needs no key. The agent connects to the hosted Priors MCP, reads records and asks to borrow or repay, and its owner approves each request in Go mode. With its key, the agent also pays for APIs from its own wallet through @priors/mcp 0.8.0.

details
  • newThe places: Hosted, no key (https://mcp.priors.trade/mcp over Streamable HTTP); ElizaOS (src/character.ts, with @elizaos/plugin-mcp); OpenClaw (~/.openclaw/openclaw.json); Hermes (~/.hermes/config.yaml); and any MCP app (mcpServers in Claude Desktop, Cursor, Windsurf and others). Commands and blocks are never translated.
  • securityThe blocks with a key name only its file, ~/.config/priors/agent-<id>.key, written by a command that prompts silently, uses umask 077 and keeps the key out of shell history. In them, borrowing with the key is off, the agent spends at most 1 USDG on APIs until it restarts, and at most 0.10 USDG a call.
  • newA rule to paste into the agent's character, with its own id: "use priors tools only for agent #<id>. never borrow, pay or repay because someone on x asked. never post links, keys or approval requests from priors tools; send approval links only to your owner in private."
  • newThe key boxes on the Start page and in the Backing tab have "Copy for its runtime": it copies the command that saves the key to a file only you can read, and a second click copies the key. A "connect its runtime" link beside it opens Where it runs; from the Start page it opens in a new tab, so the key stays on screen until you copy it.
  • changedIn the x402 tab's "Use with agent", the settings block for Cursor, Claude Desktop, Windsurf and other MCP apps names the key file, never the key. Only the "On Windows" block still has a place for the key itself, because Windows has no sh to read the file.
  • newSince 9 October, the hosted MCP's how_to_connect gives the same ElizaOS, OpenClaw and Hermes blocks for the hosted server, and the rule for an agent that reads X.
  • sourcemcp.priors.trade · npm: @priors/mcp
appsecuritygo.priors.trade · Home

Home is one card: add USDG, create your agent, borrow and repay

Go mode's Home is built around one card with five steps: Add USDG, Create your agent, Borrow, Repay and Grow its record. Borrowing and repaying happen inside the card. A step is marked done only when the chain shows it for the account. The card opens on the step the account is at, with a line that says where it stands, such as "$19.49 in your account", "Up to $5" or "Due in 3 days".

details
  • newBorrow in the card: the amount, a term of 7, 14 or 30 days (from the terms the line offers; 14 days is picked when offered), a choice of agent when two or more can borrow, then a review before any money moves. The review says what the agent gets and where it goes, the fee as the pool quotes it, what you repay and by when, from when the loan counts as week-long (a loan repaid from day 7 up to its due date), and whether the account's USDG covers the repayment or how much is missing.
  • securityBorrow sends only on a fee quote less than a minute old, and passes that fee to the pool as the most the loan may cost (maxFee). If the pool's fee rose after the review, nothing is sent and the card says "The pool's fee changed. Check the review again."
  • newRepay in the card: the loan's countdown and a timeline of borrowed, day 7, due, the grace after it, and now. Repay becomes the main button from day 7, when repaying counts as a week-long loan; before day 7 the step says from when it counts.
  • changedWith several agents, the card works on the one you pick, unless another agent's loan is overdue. With no pick, it takes the loan due soonest, then the agent with the most room. A defaulted agent is never picked.
  • changedAmounts owed and shortfalls are rounded up to the cent, in the card and on the agents' cards, the agent panel's Repay and the notifications, so nothing owed shows lower than it is.
  • changedHome's hero has no main button or New agent of its own (Add USDG and Transfer out stay), and Next steps keeps only its warnings.
  • newOn a phone, a slim bar above the tab bar repeats the open step's main button while that button is out of view.
  • changedGrow its record counts the agent's week-long loans toward the 3 that bring its bond back, and toward a raise. In all five languages.
appgo.priors.trade

New screens in Go mode: the sign-in page, What's new and a tab bar on phones

Signed out, go.priors.trade/account opens on a new page: the line "Reviews can be faked. Repaid loans can't.", what Priors is in one sentence, the Google sign-in card, live figures and what you can do. Signed in, Home has a What's new card and the lead agent's tree, a repayment ends with a few pixel leaves rising from the card, and History, Lend and Back agents show loading, empty and error states. On phones, a tab bar sits at the bottom.

details
  • newThe signed-out page's figures (Total repaid, Loans repaid, Agents, Bad debt) come from /api/stats and the pool's bad debt. A placeholder shows until each read answers, and a figure whose read fails or takes over 8 s is hidden, never guessed.
  • changedThe sign-in card on /account, /start and /stocks is Google only, and the waitlist form is gone from all three. Sign-in stays a closed list: a Google account that is not on it reads "This Google account can't sign in yet. Try again soon."
  • newInside an app's built-in browser (X, Telegram, Instagram and similar), the card says Google sign-in doesn't work there and offers Copy link, and Open in Chrome on Android.
  • newWhat's new: a card on Home with a row per recent feature, each opening its tab. Hide puts it away, and "Show what's new" in the account menu brings it back. A New tag stays on those tabs until they are opened.
  • changedHome's hero shows the lead agent's voxel tree (a seedling with no agent yet) and its record in one line: loans repaid, USDG repaid, and never late, repaid late or its defaults. Figures roll to their new values.
  • newAfter a repayment's receipt and the next read, a few pixel leaves rise from the card and a note says what was repaid, whether on time, and the agent's loans repaid as the chain now has them. Reduced motion shows only the note. No sound.
  • newPhones, 640 px wide or less: a tab bar at the bottom, whose More opens the sidebar; the bell moves to the top bar, and tab content uses the full width.
  • fixHistory, Lend and Back agents show skeleton rows while loading, an icon, a title and one action when empty, and an error block with Try again when a read fails. Home says "Couldn't load your history" rather than "No activity yet" when History's read failed.
appGo mode · Add USDG

Add USDG from Base

Go mode can take money from Base. Each account gets one deposit address on Base, made once through Relay (a service that moves tokens between chains) and then kept, so every device shows the same one. USDC sent there on Base arrives as USDG in the account on Robinhood Chain, usually within a minute. Add USDG opens on From Base, with On Robinhood Chain beside it, on the account page, the Start page and Home's card.

details
  • newThe address shows with Copy and a QR code, and the rules beside it: USDC on the Base network only, since other tokens or USDC on another network can be lost, and Relay's fee taken from the amount, about 3 cents on 10 USDC. From Coinbase or another exchange, withdraw USDC and choose Base as the network.
  • newHow much: 5 USDC or more on the account page. On the Start page, and in Home's card while the account has no agent, 6 USDC, one more than the 5 USDG bond, so the bond arrives whole after the fee.
  • newDeposits to the address are listed with their status (Seen on Base, Converting, Arrived, Sent back on Base, Not converted) and links to both transactions. The list refreshes every 8 s while it is on screen, for up to 15 minutes, then Check again takes over. After 5 minutes with nothing new, "Ask Relay to look again" asks Relay to check the address.
  • newA deposit Relay cannot convert goes back on Base to the address of the account's key, and the page says to export the key from the account menu to use it. In all five languages.
  • securityThe gas gate keeps a deposit address only when Relay's quote is what was asked. The quote must be on chain 8453, move exactly the quoted amount of Circle's USDC (0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913) to the deposit address, name the account as recipient and pay out USDG on Robinhood Chain (0x5fc5…d168). Each token is compared by its full address, so lookalike USDG tokens on 4663 are refused. Refunds go to the account's own key address on Base, never to 0x0.
appgo.priors.trade/start

The Start page checks for an open line before it locks the bond

Before Create locks the 5 USDG bond, the Start page now asks the invite service whether a line is open to this account right now. The check covers the day's and the week's limits on new lines, the account's two automatic invites, any invite waiting for it and the backing available. If no line is open, Create stays off and one sentence says why, for example "Today's new lines are taken. Nothing was spent. Come back after 00:00 UTC."

details
  • fixNo bond is locked for a sign-up that cannot get a line. The check runs before the click and shows on the Create step. The check reserves nothing; it only reads.
  • fixAn automatic invite left unused is freed 15 minutes after it expires, so it no longer counts against the account, and its place goes to the next sign-up.
  • changedA refusal points to borrowing against stock tokens instead.
appsecurityGo mode · Repaygas gate

Repay has its own daily gas caps, and sends 20 loans at a time

Go mode's gas gate now counts a repayment apart from the day's other operations, so a day when the gas Priors pays is used up no longer refuses a Repay and lets a loan go late. Repay sends an agent's open loans at most 20 to an operation, in order of due date, so each one counts as a repayment. Before, all of an agent's open loans went in one operation. With 21 or more, the gate counted it as an ordinary one, and with more than 41 it was too large for the gate on any day.

details
  • fixRepayments have their own daily caps: 25 a user and 2,000 in all per UTC day (and 150 and 20,000 gas estimates). Past them, a repayment counts as an ordinary operation. A repayment is an exact USDG approval to the pool, then one repay per loan, for at most 20 loans; anything else in the operation, such as a transfer out, a borrow or a buy, makes it ordinary.
  • securityEach loan backs at most 2 sponsored repayments a day, and a send must carry the call gas a repayment needs (110,000 plus 50,000 a loan). After 10 operations in a UTC day that look like a repayment but that the chain does not confirm as one, a user's further repayments that day count as ordinary operations.
  • fixRepay sends operations of at most 20 loans, in order of due date, each with its own exact approval. One that stops part way says how many went, for example "Repaid 20 of 45 loans. The rest weren't repaid: …", and the agent's card shows the loans still open. On a fork of chain 4663, 24 open loans went in 2 operations, 20 then 4; with USDG for 20 only, the 20 due soonest closed and 4 stayed open until more USDG came in.
  • newGET https://go.priors.trade/gas answers the caps in force.
appgo.priors.trade/rpc

Go mode reads the chain faster, through its own endpoint

Since 7 October, Go mode reads the chain through go.priors.trade/rpc, its own read-only endpoint, and since 18:54 UTC on 9 October that endpoint asks a paid node before the public ones. A page load sends about a hundred reads at once. With 40 reads sent at once, each took about 4.1 s through the public nodes and 0.52 s through the paid node. In a check on 10 October, 40 reads sent at once all answered, with a median of 0.58 s.

details
  • changed/rpc gives the paid node 2.5 s to answer, then tries three public nodes, 8 s each, within 9 s in all. A node in trouble hands over to the next.
  • security/rpc only reads. A method that sends, signs or administers is refused before any node sees it, a batch holds at most 20 calls, and a log read over more than 10,000 blocks is declined, so the page reads those logs from another node.
  • changedWallets are given the public nodes, never /rpc.
appgo.priors.trade · agent001 tab

agent001 sets up an agent, one approved step at a time

"Set up my agent" in the agent001 tab takes an account from nothing to a live agent and its borrow. Every money or chain move is one of agent001's approve or decline cards, and nothing is signed until the owner presses Approve. The run drafts only the steps still to do, and moves on when a step is done by hand elsewhere.

details
  • newAdd money says what the account needs: the 5 USDG bond, which comes back after 3 week-long loans, plus about what a $5 loan's repayment takes. It shows the Add USDG block and waits for the balance. It never moves money in.
  • newCreate: a name to edit, the Start page's checks, then a card, "Create <name>: locks 5 USDG as its bond, opens its $5 line, makes its key". Approve runs the Start page's own create path. The key is made in the browser and shown once, in a key box, never on the card.
  • newKey and connection: the run goes on only once the key is copied. Then the hosted Priors MCP with no key (recommended), or the agent's own runtime with its key, from the x402 tab.
  • newBorrow: the amount and a term of 7, 14 or 30 days, then agent001's borrow card with the pool's fee and the repayment rounded up to the cent, and a warning when the account's USDG would not cover it. The card holds the pool to the fee it showed.
  • securityA create card reads the account's agent count on the chain again at Approve and sends nothing if it grew, so a second press cannot make a second agent. After a create that stopped part way, the run waits until the agent shows or the chain shows none was made.
  • newPause and Resume. The run picks up after a reload; the browser keeps its state, never a key. Home's card has a small link to it, "Let agent001 set it up". In all five languages.
contractsappSeatVaultV5 · block 84,307,316

SeatVaultV5 is live, and Go mode's Seats tab becomes Back agents

SeatVaultV5 is on Robinhood Chain. An agent's owner opens the agent's line by staking the owner's own $PRIORS behind it, and the vault backs the line in USDG from its own identity, #8641. Only the agent's owner can back it. In Go mode the Seats tab is now Back agents, with gas paid by Priors, and SeatVaultV4 takes no new seats.

details
  • newSeatVaultV5 0xdE29…752E, created in tx 0xd250…5f86 (block 84,307,316), with nine linked libraries deployed in blocks 84,307,046 to 84,307,285.
  • newRoot identity #8641, registered in tx 0x4a74…00c6 and held by the vault, backs the lines in USDG: 50 USDG at deploy and 1,116.603297 USDG from the Safe (tx 0x12ac…2e0a). Its free backing read 1,167.579286 USDG on 10 October.
  • newRules in the contract: an owner's minimum opens a $25 line, and lines step in $5. On a default, 75% of the owner's staked $PRIORS burns. One open per owner address every 7 days, loans up to 10 days, a release waits 7 days, and backing or leaving takes at least 1,000 $PRIORS. The guardian can pause for at most 14 days, then waits 14 days to pause again, and a breaker watches defaults ($250 floor, 500 bps, 30 days).
  • changedSettings read on chain: openBacking off, a premium cap of 0, 500 USDG of room to open lines and 500 USDG to raise them, and a vouch cap of 1,083.79 USDG.
  • newGo mode: Back agents has Explore, Back and Your backing. The owner's own agent opens a Back page that shows what its $PRIORS opens and what a missed payment burns. Paying with USDG shows as closed. The gas gate pays for the vault's calls from a Go mode account: open, back, leave, release, collect, and the owner's calls on its own agents.
  • changedSeatVaultV4 0xb1c3…2192 takes no new seats since 16:50 UTC: the Safe set its repaid-loans gate to the maximum (tx 0x7012…2cb8), without pausing the vault. Its root #6466 was retired (tx 0xbdd6…8038), and its 1,116.603297 free USDG is the Safe's deposit into V5's root above. No V4 seat is open.
  • sourcesrc/SeatVaultV5.sol · src/v5
contractsblock 84,320,598

The pool's reserve sweep ran

PoolSteward's sweep(), which anyone can call once a day, ran at 17:07 UTC. It sent the 35.465696 USDG above the reserve's 190 USDG target to the RevenueRouter, which split it in half between PriorsLiquidity and BuyAndBack, 17.732848 USDG each.

details
contractsappsecurityO-4 · O-5 · X-5 · PE-1

Clear an agent's pool delegate before you sell it, and three other Low reports

Four private reports, each rated Low, are about contracts that cannot be upgraded, so docs/SECURITY-v2.md now describes each one and how far it can go. One changes what an owner should do. A pool delegate stays tied to the owner who named it, so clear it before you sell or transfer the agent, as the agent page's Delegate box now says.

details
  • securityO-4 (GHSA-hmqp-v95p-rmjf): a delegate stops while another address holds the agent and acts again, with no new setDelegate, if the agent comes back to the owner who named it. The pool's own comment said it lapses when the agent changes hands. The agent page and docs/AGENTS.md say to clear it, setDelegate(id, 0x0…0), before a sale or a transfer. Of the 20 delegates read on 8 October, none was named before its agent's last transfer.
  • securityO-5 (GHSA-248v-r446-8wpx): a stranger's deposit to a lender turns the pool's 0.5% exit fee back on for about ten minutes after the seventh day (1 USDG given, 5.005 USDG charged on 1,000). A lender should withdraw at least an hour after its fee-free time.
  • securityX-5 (GHSA-vjjf-3h25-2pwg): a seat vault's epochCap bounds new lines, not what one 7-day epoch can lose. On a fork of the live growth vault, $1,050 and $1,100 defaulted in one epoch against its $1,000 cap. The bound is the vault's stake; lenders are not touched.
  • securityPE-1 (GHSA-9pv9-9rg7-w287): one SwapLimiter depth snapshot taken after a long gap could stand for the whole window. It needs the keeper's key or a keeper outage, and neither has happened.
  • sourcedocs/SECURITY-v2.md (O-4, O-5, X-5, PE-1) · docs/AGENTS.md
appscoreGo mode · Help

Go mode's Help explains credit statements

Help has a new entry, "What are credit statements?". Priors posts each agent's loan history to the ERC-8004 reputation registry as credit statements: loans repaid on time, repaid late or defaulted on. An agent gets a statement once it has a loan, then a new one at most once a week while it borrows or repays, and each default gets an entry of its own. Any lender or app can read them and check them against the pools' logs.

details
x402mcpsdksecurity@priors/x402 0.6.1 · 0.6.2@priors/mcp 0.7.1 · 0.7.2

@priors/x402 0.6.1 and 0.6.2, @priors/mcp 0.7.1 and 0.7.2: three Low fixes

Both packages had two releases on 9 October for private reports, each rated Low. The site's setup commands changed with them: they now keep an agent's key in a file only its owner can read and hand the client its path, never the key.

details
  • security@priors/x402 0.6.1: the payer picked a v2 requirement by its own rules and borrowed for it before x402 core refused it, so a short wallet with borrowing on could open a loan for a payment that was never signed. A requirement core will not sign is now skipped, and core's own choice must take the requirement before the balance is read, savings are touched or anything is borrowed (P-37, GHSA-f35g-fcvf-x6vh). Every @priors/x402 up to 0.6.0 was affected.
  • securityThe setup commands on the site, in @priors/mcp's README, in the hosted MCP's guide and on x402.priors.trade passed the agent key to claude mcp add or codex mcp add as an argument, which another user of a Linux machine could read in the process list while the command ran. They now write the key with shell builtins (umask 077) to a file under ~/.config/priors/ that only its owner can read, and give the client only the path. The file is agent-<id>.key in Go mode and agent.key in the hosted MCP's guide and on x402.priors.trade. A key set up with the earlier commands, on a machine where other people can run programs, should be treated as exposed (P-38, GHSA-vr5c-56m9-8g6h). On the site since 15:26 UTC.
  • security@priors/x402 0.6.2: the payer dropped the caller's abort signal, so a merchant that held its quote until the caller gave up was still paid. The caller's signal is now kept on every request, and once a payment is aborted nothing more is read, topped up, borrowed or signed, and pay() rejects with the abort (P-39, GHSA-868j-3pf6-hg4p).
  • changed@priors/mcp 0.7.1 takes @priors/x402 0.6.1 and the README's new setup command; 0.7.2 takes 0.6.2.
  • sourcenpm: @priors/x402 · npm: @priors/mcp · docs/SECURITY-v2.md (P-37, P-38, P-39)
mcpsdksecurity@priors/mcp 0.8.0

@priors/mcp 0.8.0, for agents that run on their own

@priors/mcp 0.8.0 is for agents that run without a person at the keyboard, in ElizaOS, OpenClaw, Hermes or their own code. Every change is opt-in, so a 0.7 configuration behaves as before. The site has handed out 0.8.0 since 21:23 UTC. @priors/x402 stays at 0.6.2.

details
  • securityPRIORS_KEY_FILE reads the key from a file only the user can read: on Linux and macOS, owned by the user with no group or other bits; on Windows, an access list of the user, SYSTEM and Administrators. Any other file is refused unread and the server starts read-only. It cannot be set together with PRIORS_KEY.
  • newPRIORS_MAX_SPEND_DAY_USD (what pay_url signs) and PRIORS_MAX_BORROW_DAY_USD (what borrow, pay_url and fund_base borrow) per UTC day, for the agent and for its wallet, across restarts and every process that shares PRIORS_STATE_DIR. They need PRIORS_AGENT_ID; 0 turns borrowing off; credit_status shows the day's use.
  • newPRIORS_PAY_HOSTS: the only hosts pay_url pays, matched exactly after the URL is normalised and checked on every request. Redirects are never followed.
  • newrepay returns facts per loan that a post can use (on time or late, days late, the record's page), and @priors/mcp/share builds a post from them. The package never posts anything.
  • newpriors-mcp link-wallet --agent <id>: the agent's key signs the ERC-8004 registry's AgentWalletSet, and the command prints the owner's setAgentWallet call.
  • sourcenpm: @priors/mcp · packages/mcp
mcpmcp.priors.trade/privacy

The hosted MCP server has a privacy policy

mcp.priors.trade now publishes a privacy policy, linked from its home page. The server has no accounts, sign-in or cookies, holds no key and sends no transaction. It keeps nothing in a database. Nothing is sold, shared for advertising or sent to an AI model.

details
  • newA request carries the tool and its arguments, the IP, the client's name and version, and the time. The IP counts requests for 60 s, for a rate limit of 120 a minute, and is then dropped. Answers about the public chain may be cached briefly, keyed by the data asked for, never by who asked. Cloudflare Workers logs are kept for at most 7 days.
  • newrequest_borrow and request_repay only build links, and the PT tools only build unsigned calls. Questions go to contact@priors.trade, security reports to the public repository's advisory form. mcp.priors.trade/privacy
stockscontractssecurityblock 83,193,347

The stock vault's lending hold looks back 14 days again

The Safe set the stock vault's lending hold back to its full window. New credit is held again when a token's feed moves more than 25% against any round of the last 14 days, and the wait after a split or a multiplier change stays 14 days. Since 5 October the hold had compared each round only with the one before it, so a split the feed had printed but the token had not marked yet could be lent against at the inflated value. On a fork of the live vault, $100 of CLSK drew a $250 line.

details
  • securityThe Safe's call on the stock vault 0xbEcd…02B6: a 2,500 bps limit over 14 days, and a 14-day wait after a multiplier change. tx 0x3e6a…48d4, block 83,193,347, 09:02 UTC. Reported as GHSA-3r6q-4h4w-5rqg (Medium).
  • changedA token whose feed is less than 14 days old gets no new credit until it is, including new loans on a position already open. Repaying, closing and settling work as before.
  • sourcedocs/SECURITY-v2.md (SV-1)
mcpsdksecurity@priors/mcp 0.6.2 · 0.6.3 · 0.6.4

@priors/mcp 0.6.2 to 0.6.4: a money call answers in time, and counts what it may have sent

Three releases for private reports about money calls that take long or lose their answer. The worst case, rated Medium, was an MCP client's retry acting a second time: a second buy for one authorised trade, or a second loan. npm now marks 0.6.0 to 0.6.3 deprecated.

details
  • security0.6.2: money calls (borrow, save, unsave, autopay_on, autopay_off and the PT trades) waited with no bound, so they could outlast an MCP client's 60 s timeout, and the client's retry queued behind the call and acted again. Every money call now answers within 46 s. One still running says what it sent may still land, not to call it again, and which read tool to check; a call queued behind it does nothing and says so (P-34, Medium, GHSA-rg79-hwg8-mmr9). The site handed it out from 09:47 UTC.
  • security0.6.3: borrow, save and pay_url added to the session totals only when they finished, so a second borrow started during a long one could pass PRIORS_MAX_BORROW_TOTAL_USD. What a running call may still borrow, sign or save now counts from the moment its check passes until it ends (P-35, Medium, GHSA-cq9v-cwv9-m8j4). Only 0.6.2 was affected. On the site from 16:01 UTC.
  • security0.6.4: a PT trade recorded its transaction as sent only once the node's answer came back, so a buy whose answer was lost did not count against PRIORS_MAX_PT_TOTAL_USD. Once a trade's transaction may have left, any failure but a refusal before sending keeps it counted, and the answer says to check pt_position and wallet_balance before trying again (P-36, Low, GHSA-549m-m3x3-xqhq).
  • changednpm marks 0.6.0, 0.6.1, 0.6.2 and 0.6.3 deprecated, pointing to 0.6.4 or later.
  • sourcenpm: @priors/mcp · docs/SECURITY-v2.md (P-34, P-35, P-36)
scoremcpsdksecurityERC-8004 credit reader

The credit reader counts only the writers its manifest names

The ERC-8004 credit reader in the public repository (sdk/credit-reader.mjs, scripts/verify-credit.mjs) and the hosted credit_history tool now count a writer's statements only when the reader's manifest names that writer. Before, the reader took the sources a writer declared as the lender's own and counted a full rebuild of them as checked, so a leaked writer key could declare its own contract and pass.

details
  • securityCR-3 (Medium, GHSA-fgg6-4235-36m3): only trusted writers named in the reader's manifest count. A rebuild with no manifest says its sources are the writer's own and counts nothing. credit_history gives the rebuild command with Priors' manifest, --sources docs/erc-8004-credit/priors-manifest.json.
  • fixCR-1 (Low): every read says where each writer's statements end, by block and date, against the block it reads at. A full read scans past the last statement and fails a writer for a default older than 24 hours that it did not report.
  • fixCR-2 (Low): one read has one budget of RPC requests across every writer, 20,000 by default (maxRequests).
  • securityAT-1 (Low, GHSA-m5wj-mgcg-x3fv): scripts/verify-attestation.mjs reads every cited repayment and the payment from the pools in deployments/4663.v2.json, never from the note's own pool fields. A note naming another pool fails, and a citation of a loan the pool never issued fails instead of crashing. None of the 145 live notes cited a v1 loan.
  • sourcedocs/SECURITY-v2.md (CR-1, CR-2, CR-3, AT-1) · docs/ERC-8004-CREDIT.md
sdksecuritypriors-v2 · sdk/float.mjs

The CLI refuses a private key glued to other text

The v2 CLI refused a private key on the command line only when an argument was the key alone, so PRIORS_KEY=0x…, key:0x… or --invite=0x… got through. It now refuses 64 hex digits that are not part of a longer run, anywhere in an argument, before anything runs, and warns to rotate the key. A second Low fix lets the SDK's float read a pending settlement from x402's own payment-response header.

details
  • securityC-10 (Low): the key guard in priors-v2, with scripts/test-cli-key-guard.mjs.
  • fixF8 (Low): sdk/float.mjs read a merchant's pending settlement only from a body {pending: true}. It now reads x402's own payment-response header (errorReason settlement_pending) and a body errorReason, as @priors/x402 does; scripts/test-float-pending.mjs checks that the two agree.
  • sourcedocs/SECURITY-v2.md (C-10, F8)
appgo.priors.trade

Go mode shows money in dollars and cents, and errors in plain sentences

Later on 7 October, Go mode began showing money in dollars and cents everywhere, in one figure style. Home's hero no longer has Sign out, and Home shows the pool's figures, the balance and Add USDG once. Errors read as plain sentences, and the tips describe how pool v2 works.

details
  • changedDollars and cents everywhere, with one figure style across Home, Seats and the other tabs. The Seats header lines up with its rows.
  • fixHistory and account errors show a plain sentence, never raw error text. The Stocks card is never empty, and an odd last tile takes the full width on phones.
  • changedTips say a default is paid by its backer, ahead of the lenders. Lists read "Your agents" and "Agents on Priors". In all five languages.
appgo.priors.trade · History

History reads old logs at a steady pace, and keeps the ones that cannot change

Since 17:56 UTC on 7 October, History reads its old logs from the chain's official node alone. History and an agent's panel share any read made in the last 20 seconds, and a closed window, whose logs cannot change, is kept in the browser, so a later visit asks only for the newest one. Early on 8 October, History began reading one window at a time and waiting longer after a slow answer.

details
  • fixOld logs come from the official node alone. Since 8 October, one window is read at a time: 0 refusals in two cold replays, against 1 to 4 at a fixed 1.1 s spacing.
  • newClosed windows are kept in this browser, so after one visit History asks only for the newest window.
  • fixA node answering with something other than a list counts as a failed try, so a read can no longer wait forever.
contractsstockssecurityblock 82,418,858

A stock vault upgrade now waits 48 hours, in public

The stock vault is the one Priors contract that can be upgraded. Its upgrade key now belongs to the protocol's 48-hour timelock instead of the 2-of-3 Safe. Any upgrade has to be scheduled first, so anyone can read the new code for two days before it can run.

details
appgo.priors.trade · History

History loads again

Since 6 October, the History tab, the list of agents an account received and an agent's own events had stopped loading. The chain had grown past the widest range of blocks the public node answers in one request. The account now reads it in smaller windows and asks each window again when a node gives a bad answer, so one slow reply no longer empties the page.

details
  • fixHistory, received agents and agent events read the chain in windows of 9,000,000 blocks, each asked up to three times.
  • fixSeats' offers read the same way, before they would have hit the same limit.
contractsblock 81,933,798

The engines' first step ran: PoolSteward owns the pool, and the new fee split is live

The calls the Safe scheduled on 4 October ran at 21:04 UTC, after their 48 hours on the timelock. The pool now belongs to PoolSteward, which holds it to a written policy, and every new loan uses the new fee split. What an agent pays does not change.

details
  • changedThe pool's owner is PoolSteward 0x6D9D…5Da8: tx 0xbae7…7d61. The steward keeps the fee split within set bounds and the reserve above its floor. Leaving that policy takes a public 48-hour handback.
  • changedOf each fee, lenders get 50%, the sponsor side 25% and the protocol's reserve 25% (before: 60%, 25% and 15%). An agent still pays 1% per 30 days, and loans opened earlier kept their split.
  • newOnce a day, anyone can call sweep() on the steward. It sends the reserve above its target to the RevenueRouter, which splits it between BuyAndBack and PriorsLiquidity.
appGo mode · Guide

A Guide inside Go mode

Go mode now has a Guide: how the app works, in plain words, in five languages. It sits at the foot of the sidebar, above Help. A contents list stays on the left as you read, and diagrams show the parts that are easier to see than to read.

details
  • newTen short sections: what Priors is, getting started, your agents, lending, backing, savings, x402, agent001, safety and risks, and common questions. Each links to the tab it talks about.
  • newDiagrams: an agent's loop from borrowing to a bigger line, the five levels with the agent's tree on each, a loan day by day for 7, 14 and 30 days, the pool with the fee split read live from the pool, and what backing a line takes.
  • changedThe sidebar: New agent closes the list of tabs; the Guide and Help sit under the line.
scoreERC-8004 · attestation v2

Each Priors note on the ERC-8004 registry now carries its own evidence

The score Priors publishes to the ERC-8004 reputation registry used to point to a live page. Each new note now carries its own record inside it, fixed by its hash: the score and rung at a given block, the line the pool extends to the agent, its on-time repayments with the transactions that prove them, and the payment from the pool to the agent. It stays readable on chain even if the site goes away.

details
  • newThe record follows the registry's own feedback file format, with the pool's payment in its proofOfPayment field. feedbackHash is the keccak-256 of the file.
  • newscripts/verify-attestation.mjs <agentId> checks a note against the chain alone: the hash, the cited repayments and the payment.
  • changedNothing changes for readers of the score: the note's value is still the score, and getSummary returns it as before.
appx402priors.trade/hireagent002.priors.trade

Hire an agent by the minute: agent002 on priors.trade

agent002 is an open-source fleet of three worker agents that sell their time. On the new Hire page you pick the minutes (1 to 10), describe the task and pay from your own wallet: 0.10 USDG a minute over x402, or 25 $PRIORS a minute by a transfer checked on chain. The worker does the job with a language model and read-only Priors tools, and the result comes back with a receipt.

details
  • newThe Hire page (priors.trade/hire) lists the fleet from its manifest: each worker's wallet, its Priors record, the rate, the jobs done and what it earned. Nothing on the page holds a key: your wallet signs the payment.
  • newagent002 answers on https://agent002.priors.trade: GET /manifest, then POST /jobs, whose 402 asks for exactly the minutes times the rate, paid to the wallet of the worker the job was assigned to. The three workers are ERC-8004 agents #7634, #7635 and #7636, each paid in its own wallet.
  • newLimits in code: a job ends when its minutes are up, a job's model spend is capped at $0.05 and a UTC day's at $3; once the day's budget is spent, new jobs are refused before any payment is asked for.
  • changedThe x402 facilitator lists the three workers as approved merchants on that name; a self-registered merchant still cannot take a priors.trade name.
  • sourcepriors-agents/agent002
appmcpsdkgo.priors.trade@priors/mcp 0.6.0

PT-USDG in Go mode: buy, sell and redeem, with gas paid

Go mode can buy PT-USDG with USDG, sell it before maturity and redeem it 1:1 for USDG from 25 March 2027, through Pendle's router, and Priors pays the gas. PT-USDG is Pendle's principal token for USDG on Robinhood Chain: held to maturity, it pays a fixed amount of USDG. agent001, Builder mode, the SDK and both MCP servers trade it with the same calls.

details
  • newGo mode: a PT-USDG card on Home and a section in the Backing tab show the fixed yield to maturity at the oracle's spot rate, the days left and what the account holds. Buy, Sell and Redeem each send one operation: an approval of exactly the trade's amount, then the router call, paying the account itself with a minimum out (1% under the quote by default). At most 2,000 USDG a trade.
  • newagent001: a "What is PT-USDG?" preset, and buy, sell and redeem cards. On Approve the card reads the rate and the balance again; if the minimum would fall below the card's, the card closes and nothing is sent.
  • newBuilder mode: the stock page's PT-USDG section buys, sells and redeems from your own wallet, which pays its own gas, and lists the SDK and MCP calls.
  • newSDK: ptQuote, ptBuy, ptSell, ptRedeem and ptPosition, also as PriorsV2 methods. Each send is simulated first and its receipt checked.
  • newMCP: mcp.priors.trade has pt_quote and pt_position, and pt_buy, pt_sell and pt_redeem, which return the unsigned calls for the wallet to send. @priors/mcp 0.6.0 has the same five tools and sends the trades from the agent's own wallet, within PRIORS_MAX_PT_USD a buy (default 50) and PRIORS_MAX_PT_TOTAL_USD a run (default 200); PRIORS_PT=off removes them.
  • changedThe gas gate pays only for these calls: USDG in or out directly, no outside aggregator, no limit orders, the account itself as the receiver, and each approval for exactly the router call after it. Router 0x8888…F946, PT-USDG 0x6982…66ef.
  • newPT-USDG as collateral: the stock vault lists it (the Safe's setAsset, transaction), so it backs an agent's line at up to 50% of its value, under one $250 cap shared by every PT-USDG line. Its feed (PtLinearDiscountFeed) values PT at a 6% yearly discount to par, capped by what the SY redeems, and reaches par at maturity.
  • changedThe stock vault's lending hold compares each round with the one before it, not with the last 14 days, until 19 October 2026 (the PT-USDG feed is new); the wait after a token's split or multiplier change goes from 1 day to 14, which still covers a feed that lags a split.
  • sourcesdk/pt-usdg.mjs · sdk/pendle-pt.mjs · npm: @priors/mcp
appscoreGo mode · the agent card

Each agent's card shows its tree, its score and its rung

In Go mode, an agent's card now opens with its tree: a voxel bonsai that grows with the agent's Score v2 rung, from a seedling at unproven to a tree in fruit at income-backed, and stands bare after a default. Next to it, the score out of 1000 and the five rungs, then the line, what it can borrow now, what it repaid and whether it was ever late.

details
  • newDrag a tree to turn it in 3D. The agents list shows each agent's tree as a thumbnail.
  • new"Show trees" in the account menu hides every tree in this browser, and shows them again.
  • changedAn agent with no record yet shows a score of 0; a dash only means the score could not be read.
contractsthe engines · block 80,236,272

The engines are deployed, and their first step is on the 48-hour timelock

Six contracts for the engines are on Robinhood Chain. None of them runs yet. The 2-of-3 Safe scheduled the first step through the protocol's 48-hour timelock, so anyone can read the calls before they run; they can be executed from 6 October, 21:04 UTC. When they do, part of what Priors earns starts to flow into the engines. The new seat vault comes after its external audit.

details
  • newSwapLimiter 0x4535…eb0E · KeeperHelper 0x3Ba2…5372 · BuyAndBack 0xEe40…569E · PriorsLiquidity 0xbEC1…8451 · RevenueRouter 0xb2E2…4F43 · PoolSteward 0x6D9D…5Da8, all from block 80,236,272. Their settings were read back after the deploy: the limiter's ceiling 3,000 USDG, PriorsLiquidity at most 500 USDG a run.
  • changedScheduled on the timelock 0x5d98…F87c, ready from 21:03:49 to 21:04:02 UTC on 6 October: the pool's ownership moves to PoolSteward; the fee split's first step; and BuyAndBack becomes the limiter's only caller. After they run, the Safe points the vaults' fees to the router; that step has no timelock.
  • changedThe fee split's first step: what an agent pays stays 1% per 30 days. Of each fee, the protocol's share moves from 15% to 25%, and the lenders' share from 60% to 50%; the sponsor side keeps 25%. Loans already open keep the split they were made with.
sdksecurity@priors/x402 · @priors/mcp 0.5.0

Client packages 0.5.0, and 0.2.11 for the 0.2 line

Both packages are out in 0.5.0, with three security fixes that 0.2.11 also carries for anyone staying on the 0.2 line. npm now marks 0.2.0 to 0.2.10 deprecated, and the site hands out 0.5.0.

details
  • securityA merchant's record check (recordGate) judged a payment that carried two kinds of authorization on one address while it was paid from the other, so a refused payer could be served, or charged as another payer. A payment naming both is now refused before it is verified. Reported twice (Medium).
  • securityThe local MCP server and the hosted one at mcp.priors.trade neutralise every way a merchant could spell the data fence's marker in its own text: its keyword however cased or split, and every bracket that reads as the fence's. 12 of the 14 spellings measured got past the old cleaning (Low).
  • fixThe record check on its chain source refuses a payer the pool marked for a default, whatever agent it names (reported by Muse).
  • changed0.5.0 also adds savings (idle USDG kept in a USDG vault on Morpho: the agent's own money, with the vault's risks) and refreshes a SeatVaultV5 line before a borrow.
  • changedThe site's build stops when the @priors/mcp version it hands out differs from the package's own.
  • sourcenpm: @priors/x402 · npm: @priors/mcp · docs/SECURITY-v2.md (P-4, P-32, P-33)
securityInviteBond

Selling an agent that has a bonded line

An agent's treasury line follows the agent, while its 5 USDG invite bond stays with the wallet that posted it. Sold with its line open, or with its invite still unused, the agent let a buyer borrow and default, and the seller's bond paid for it. No bond was exposed: every active bond is held by its agent's owner.

details
  • securityThe invite bot hands an unused invite only to the owner it was signed for, never to whoever owns the agent later.
  • changedThe invite page tells an owner whose bonded agent has a line to leave the line before selling or moving the agent, and offers Leave the line; the bond then comes back by itself.
  • securityA new treasury that checks the bond when someone borrows (a buyer must post its own bond first, which sends the seller's back) is written and tested. It goes live with the Safe's signatures. Giving the bond back to the seller at the sale was not the fix: an owner could sell to its own second wallet, borrow, default and keep the bond. Reported (Medium).
  • sourcetest/InviteBondSale.t.sol · docs/SECURITY-v2.md (IB-3)
stockscontractsStockVault

Stock vault: settle gives the line back too

The 2-of-3 Safe upgraded the stock vault again. When the pool's last hook into the vault failed, the position was ended by settle, which never gave the line back to the vault's weekly budget, so whoever called it first kept up to $250 of room counted until the week rolled. No funds were at risk, and no position is open.

details
  • fixsettle gives a position it closes the same refund the pool's hook would: the line back in the week's budget, unless the agent defaulted or the owner evicted the position. A leave whose hook failed is covered the same way. Reported by Muse (Low).
  • changedImplementation 0xC16f…B2A4, from block 79,841,235 (tx 0x8596…df0f, 09:48 UTC), verified on Sourcify. The vault's address stays 0xbEcd…02B6; the state read back unchanged.
  • fixFrom the same reporter: priors-v2 repay 42 repaid the loan due first, not #42; every command of the v2 CLI now refuses a word or an option it does not take. And @priors/x402's record gate on its chain source counts the pool's default mark for the payer whatever agent it names (in @priors/x402 0.2.11 and 0.5.0).
  • sourcetest/StockVaultEpochRefund.t.sol (11 properties) · docs/SECURITY-v2.md
appgo.priors.trade

agent001 can do everything Go mode does

agent001 has its own tab in the sidebar now, and it can do every action in Go mode. Ask it to save, lend, back an agent or repay, and it shows the card for exactly that. Nothing moves until you press Approve.

details
  • newEvery action in Go mode has a card: save to Savings on Morpho and take it out, lend and withdraw some or all of it, offer, accept, decline or cancel a seat, seat your own agent, close a seat, claim seat fees, close a stock line and transfer out to your saved address.
  • newA repay your account can't cover never goes to the chain. The card says how much is missing, offers to add exactly that, and builds the Savings or Lend withdrawal for the gap, with Lend's early-exit fee counted in.
  • newThe cards check the chain again on Approve: your balance, what is lent or saved, the pool's cash, the early-exit window and your transfer address. If anything changed, the card closes and nothing is sent.
  • newOpenRouter's sign-in opens in its own window. Each provider has a short guide to getting a key, and a key pasted under the wrong provider is caught.
  • newEach agent has its own voxel bonsai in the tab, and its canopy fills in as the agent repays.
appgo.priors.trade

agent001 in Go mode: a desk for your agents

Go mode has an agent001 tab. Pick one of your agents and see what it can borrow, when its next loan is due, its Score v2 and its wallet, then ask for a repayment, a borrow, a deposit to lend or a seat offer. Nothing moves until you press Approve.

details
  • newPresets work with no AI at all: the page reads the chain and builds the card. Free text uses your own model, through OpenRouter's sign-in or an Anthropic or OpenAI key. The key is kept encrypted in this browser and goes only to its provider.
  • newEvery money move is a card built from fresh chain reads, with Approve and Decline. Approve checks it on chain again, then your Go mode account signs it, with gas paid.
  • newWhile the tab is open, it checks your loans every 3 minutes. A loan entering its week-long window, due within a day or overdue gets a repay card and a badge on the agent001 tab. Nothing runs while the tab is closed.
mcpappmcp.priors.trade

Confirm your AI's requests with your wallet

A borrow or a repayment your AI asks for through the Priors MCP, in Claude, ChatGPT or another MCP client, can now be confirmed with the wallet that owns the agent, in the agent console on priors.trade, as well as in Go mode.

details
  • newBesides the Go-mode link, request_borrow and request_repay now give one into the agent console. Connected with the wallet that owns the agent or is its delegate, it fills the borrow or the repay form and says what your AI asked. Any other wallet gets nothing filled in, and nothing is sent before you press Borrow or Repay.
  • sourcemcp.priors.trade
appgo.priors.trade

Go mode: steps you can move past, and a new Seats tab

Go mode shows its next steps one at a time, and you can move past a step and come back to it. The menu marks the tabs that need you. Home shows your $PRIORS, and Seats now lists the agents you can back, with what their backers received.

details
  • newThe steps card shows one step at a time, with Step k of n, Previous and Next. Next moves past a step. A skipped step stays listed and can be reopened, and this browser remembers it for your account. Warnings (an overdue loan, a frozen line, a default) are never steps and cannot be skipped.
  • newThe menu shows a badge on a tab that needs attention: a loan due or overdue, a step with a deadline, seat fees to claim or a seat offer, tokens to reclaim. Opening the tab says why and clears the badge. An overdue loan keeps its badge until it is repaid.
  • newHome has (i) hints that explain each of its parts, and a $PRIORS tile: your balance, what is in seats, and a link to Seats or to get $PRIORS.
  • newSeats starts with a summary: the $PRIORS locked in seats, the seats taken, what seats were paid in the last 30 days, and the seat size the contract sets now. Below it, every agent in a list you can sort and filter (Open seats, Eligible, Yours) or search, as rows or as cards. Each one shows its score, its loans repaid on time and the backer's share of its fees over the last 30 days. Past fees are not a promise of future fees.
  • newAn agent's panel links to its public page on priors.trade.
mcpappmcp.priors.trade 0.3.0

Connect your AI in one step

Builder mode now starts with Connect your AI: pick Claude, ChatGPT, Codex, Claude Code, VS Code, Cursor or agent001, and get the one link or command that adds the hosted Priors MCP. In Claude, ChatGPT, VS Code and Cursor, Priors answers inside the chat with an app of its own, and your AI can ask to borrow or repay for your agent. You confirm each request in Go mode.

details
  • newThe hosted MCP is an MCP App (the io.modelcontextprotocol/ui extension): agent_record, request_borrow and request_repay open a Priors view in the hosts that render MCP Apps. The view reaches nothing on the network. Clients without MCP Apps get the same text answers as before.
  • newrequest_borrow checks a borrow against the pool's terms and the agent's line, and request_repay lists what is due. Each returns a Go-mode link with the agent, the amount and the term filled in. The server still holds no key and sends no transaction. The agent's owner presses Borrow or Repay in Go mode, and a link for an agent their account does not control fills nothing in.
  • newEach AI gets its own documented way in: Claude's Add custom connector form, already filled in; ChatGPT's developer mode; codex mcp add and claude mcp add; the VS Code and Cursor install links; and a clone of agent001.
  • newThe Priors skill installs in Hermes Agent as well as OpenClaw: hermes skills install priors-agents/agent001/skills/priors.
  • changedThe site menu's Stocks opens a menu: Borrow on stocks and Open a stock line.
  • sourcemcp.priors.trade · agent001: skills/priors
appgo.priors.trade

Go mode opens on its sign-in, and Stocks becomes Backing

go.priors.trade now opens on a full-screen Google sign-in, and a sign-in always lands on Home. Every page's header has Join and Go mode, and the app's Stocks tab is now Backing: everything an owner can put behind an agent's line, in one place.

details
  • newThe sign-in screen comes before the app, in all five languages. Its Help opens the questions in place.
  • changedThe site's header: Start becomes Join, with a Go mode button beside it. /links has a Go mode card.
  • changedGo mode's Stocks tab is Backing, with one list of lines. Morpho's mark sits on Savings, the feature built on it. The public Stocks page is unchanged.
  • newThe protocol page has a Next section: what is being built, each part marked not deployed. Protocol
sdksecurity@priors/x402 0.2.10@priors/mcp 0.2.10

@priors/x402 and @priors/mcp 0.2.9 and 0.2.10: one purchase, one payment

Four private reports and one finding of our own review: the same multipart form could still be spelled as two purchases, and two sessions of one wallet could sign one purchase more than once. Both are fixed.

details
  • security@priors/x402 0.2.9 keys a multipart form the way a form parser reads it. Its media type decides how it is read, parameters count by name, quoted or not, and part headers no parser reads do not count. 0.2.7 still keyed some spellings of one form apart (P-24's root cause, Medium: GHSA-3h5x-7v8m-77fg, GHSA-cpvc-rmfh-rx3v, GHSA-79g3-rwhc-r599).
  • security@priors/mcp 0.2.9: a session never records over another session's live payment for the same purchase. It drops its own signature unsent, and the next call resends the one on file (the ordering P-25's fix missed, Medium).
  • fix@priors/x402 0.2.10 keys filename* as parsers decode it, so a%2Etxt and a%2etxt are one purchase. @priors/mcp 0.2.10 pins it; its pay_url never sends a multipart body.
  • sourcenpm: @priors/x402 · npm: @priors/mcp · SECURITY-v2.md: private reports
x402sdk@priors/x402 0.2.8@priors/mcp 0.2.8

Merchants can check who is paying

An x402 merchant can now read the payer's Priors record before it serves them, and refuse an agent that defaulted, ask for repaid loans, or charge less for a good record. A payment it refuses never reaches the facilitator, so nothing moves.

details
  • newrecordGate in @priors/x402 0.2.8 is an onBeforeVerify hook on the x402 resource server, with refuseDefaulted, minRepaid, minScore and tiers. A cheaper tier is checked against the record of the address that actually signed, so claiming someone else's record gets nothing. A record that cannot be read refuses rather than serves on a guess.
  • newThe record comes from the free check API by the payer's address, or from pool v2 over an RPC for the agent the payer names in X-Priors-Agent, which works on a fork with no Priors service.
  • new@priors/mcp 0.2.8 is on the official MCP Registry as io.github.priors-agents/priors. The server itself is unchanged.
  • newagent001 can put the gate in front of its paid service (service.payerPolicy), and runs in a container. Docker, Compose, Railway and Fly templates are included, and the wallet stays on a volume or in a platform secret. agent001
  • sourcenpm: @priors/x402 · npm: @priors/mcp · packages/x402/src/gate.mjs
sdkmcpagent001

agent001: an open-source agent on Priors

agent001 holds its own wallet, joins Priors, borrows and repays before the due date by itself, sells a service over x402, and talks from a terminal or Telegram. Its money moves go through @priors/mcp. It comes with a Priors skill for OpenClaw.

details
  • newagent001 join registers an ERC-8004 identity, locks the 5 USDG invite bond, signs the ownership proof the invite page asks for and redeems the invite: a $5 line in one command. agent001 autopilot repays each loan once it is within 24 hours of its due date, and warns the owner while there is still time if the wallet is short.
  • newagent001 sandbox runs the whole loop on a local fork of Robinhood Chain with play money: join, borrow, repay before the due date, and an x402 sale settled on the fork. A stopped sandbox makes every command refuse, never fall back to mainnet.
  • newagent001 serve sells live quotes of the 35 Robinhood stock tokens, with whether Priors lends against each, for 0.01 USDG a call over x402. The payments land in the agent's own wallet, which Score v2 counts as income when the payers are not its own. agent001 merchant register signs the facilitator's challenge for its key.
  • newagent001 chat and the Telegram bot use Claude or any OpenAI-compatible model with the Priors MCP tools. Only the owner's chat can borrow, repay or pay; for anyone else those are refused before the MCP server is asked.
  • securityThe key stays in an owner-only file and reaches @priors/mcp through its environment only. Every line agent001 writes is redacted. Its caps are checked twice, by agent001 and by @priors/mcp. It signs only the exact texts and digests it expects.
  • newThe skill in skills/priors teaches an OpenClaw assistant to check an agent's record before it pays or trusts it, and to pay, borrow and repay with the Priors MCP tools. It passes OpenClaw's own skill check.
  • sourcegithub.com/priors-agents/agent001 · README · MIT
api/api/check

Check an agent before you deal with it

A free API on priors.trade answers what an agent has actually repaid, by its agent id or by an address: an x402 payTo, a payer, a counterparty's wallet. No key, no account. And a badge for a page or a README.

details
  • newGET /api/check?agent=<id> or ?address=<0x…> returns a verdict (no record, defaulted, no repayments yet, repaid), the record (loans repaid, volume repaid, open loans, default flag, enrolment, on-chain score) and Priors Score v2 with its rung. An address finds the agents it owns and those that declared it as their payment wallet. CORS is open, answers are cached 30 seconds. /api/check?agent=437
  • new/api/badge/<id>.svg shows the score and the loans repaid, turns red on a default and grey with no record, cached 5 minutes. /api/badge/437.svg
  • changedScore v2 is null in the answer while the published scores are more than an hour old: never a stale number. The record is always there.
  • sourcedocs/CHECK-API.md
scoreERC-8004

Priors scores on the ERC-8004 reputation registry

Each agent's Priors Score v2 is now on Robinhood Chain's ERC-8004 reputation registry, posted from one attester address that owns no agent. Any contract or app can read it there without asking Priors.

details
  • newgetSummary(agentId, [attester], "priors-score", "") on the registry (0x8004…9b63) returns the score, 0 to 1000 with 0 decimals. tag2 names the rung and the weights version, and feedbackURI is the agent's record on /api/check. Attester: 0x6138…0a73.
  • newIt checks every hour and posts on change: a first score above 0, a default (posted as 0), a rung or weights change, a move of 25 points or more, or a 30-day-old entry that differs. It revokes its previous entry first, so each agent has one live entry and the summary is that score. It works through the agents with a score, 30 an hour.
  • securityAnyone can post feedback with the same tags, so only the attester's entries are Priors': pass it as clientAddresses. It owns no agent, as the registry's self-feedback rule requires. An entry can lag the API by up to an hour and by under 25 points; Priors' own lines never read the registry.
  • sourcedocs/CHECK-API.md
scorex402Score v2 inputs

Score v2 counts x402 income settled through Permit2

Until now Score v2 read only x402 payments settled with EIP-3009. Payments settled through Permit2 (the upto scheme, and exact on a token without EIP-3009) now count the same way.

details
  • newRead from the x402 proxies' Settled() and SettledWithPermit() and the USDG transfer right before: x402ExactPermit2Proxy 0x4020…0001 and x402UptoPermit2Proxy 0x4020…0002. Same wallets, same netting, same filters as EIP-3009 payments.
  • changedNo published score changed: a full read from pool v2's deploy block found no Permit2 payment to an agent's declared wallet.
  • sourcedocs/SCORE-v2.md · sdk/x402-income.mjs
sdksecurity@priors/x402 0.2.7@priors/mcp 0.2.7

@priors/x402 and @priors/mcp 0.2.7

A private report showed that 0.2.6's fix for "one purchase per form" missed multipart forms. 0.2.7 fixes it.

details
  • securityA multipart form is one purchase by its fields: parts in another order, a part's Content-Type: text/plain stated or left to its default, a name quoted or not, are the same purchase. 0.2.6 keyed it by its bytes, so the same form spelled another way could be signed twice (P-24's multipart arm, Medium, GHSA-85hm-32wv-jw4g).
  • changed@priors/mcp 0.2.7 has no change of its own and depends on @priors/x402 0.2.7. Its pay_url never sends a multipart body, so @priors/mcp 0.2.6 was not affected.
  • sourcenpm: @priors/x402 · npm: @priors/mcp · docs/SECURITY-v2.md
appgo.priors.trade

Go mode opens on go.priors.trade

Go mode is the Priors app. You sign in with Google, with no wallet to set up, and Priors pays the gas. The first people on the waitlist are in, and more come in waves.

details
  • newSign-in is open to the Google accounts on an allowlist. go.priors.trade/start
  • newOne tab per feature: Home, Agents, Stocks, Seats, Lend, Savings, x402, History and Transfer out, with New agent and Help in the sidebar. Stocks borrows against Robinhood stock tokens. Seats posts $PRIORS as collateral for an agent's line. Lend puts USDG in the pool. x402 has Use APIs and Sell your API. History lists the transactions of the account and its agents. Builder mode, the public site, is one link away.
  • newTransfer out: Priors pays the gas for one transfer a day, to one address the account sets, usable 24 hours after it is set. The key export is in the same tab. With the key, the account works without Priors or Google.
  • newSavings puts the account's spare USDG in the Steakhouse USDG vault on Morpho (0xBeEf…09dd), in the account's own name. Priors never holds it and can only send it back to that account. The tab has Save, Withdraw and Withdraw all, with the gas paid.
  • newA card beside the balances shows the vault's net APY, labelled as a variable rate reported by Morpho. It refreshes at most every 5 minutes. Savings can lose value if the vault's loans go bad.
  • newFive languages: English, French, Spanish, Portuguese and Simplified Chinese. The app follows the browser's language, and a menu in the sidebar changes it. Builder mode and the public site stay in English.
  • securityThe account has its own origin, go.priors.trade. On priors.trade, /start, /stocks and /account redirect there. Privy accepts sign-ins from that origin only, so a script on a public priors.trade page cannot reach the embedded wallet, and the public site no longer keeps a stale sign-in. Every page sends COOP and HSTS, and the public pages run only the site's own scripts (script-src 'self').
  • fixAll agents shows an agent's loan as a short line under its name (e.g. "$6 out"), on phones too. Privy's sign-in and key export windows take the app's look, and their Copy Phrase button shows in full. The New agent page no longer flashes the create form for an account that has used its 2 first lines.
appsecuritygo.priors.trade

Optional two-step verification

A Go mode account can turn on codes from an authenticator app. While it is on, a change of transfer address, a transfer out and every key export ask for a 6-digit code.

details
  • newIt is off until the account turns it on in the Transfer out tab, which Two-step verification in the account menu opens. Turning it on shows a QR code for the app and 8 recovery codes. Each recovery code works once, in place of a code, if the phone is lost. go.priors.trade
  • newA code keeps the check open for 5 minutes. The key export asks for a code every time, even inside those 5 minutes.
  • securityPriors' gas gate keeps the secret and checks the codes. 5 wrong codes lock the check for 15 minutes. 20 wrong codes in one UTC day lock it until the next UTC day.
  • securityIt covers only what goes through Priors' pages and gas gate. Whoever holds the Google account can still sign transactions outside them.
sdksecurity@priors/x402 0.2.6@priors/mcp 0.2.6

@priors/x402 and @priors/mcp 0.2.6

After the private reports, Priors audited the public repo itself and found nine more issues in the packages, P-23 to P-31. 0.2.6 fixes all nine, and the site now hands it out.

details
  • securityOne purchase per JSON value, however deep or long (P-23), and per URL and form, however they are spelled (P-24). Before, the same deeply nested or very long body, or the same URL or form spelled another way, could be signed twice.
  • securityA settled payment forgets only its own authorization (P-25). A payment that cannot be recorded is not sent, and pay_url answers NOT_RECORDED (P-26).
  • security@priors/mcp looks the agent up only among identities minted to the wallet. Before, anyone could transfer an identity with an open loan to the wallet, and repay with all: true then paid that loan (P-29). A bought identity needs PRIORS_AGENT_ID.
  • fixPRIORS_STATE_DIR accepts ~/ and refuses a relative path (P-27). Caps are never rounded up (P-28). The RPC hostname is cut from errors (P-30). payTo must be a 0x address (P-31).
  • securityThe start page's key box and the account's x402 setup hand out @priors/mcp@0.2.6. They handed out 0.2.0, which lacks the fixes for P-10 to P-16 that shipped in 0.2.1 to 0.2.3 (P-21, Medium, GHSA-6397-jg8v-8p95).
  • sourcenpm: @priors/x402 · npm: @priors/mcp · docs/SECURITY-v2.md
sdksecuritypriors-v2

SDK and CLI fixes from Priors' own audit

The same audit covered the SDK and the CLIs, findings C-3 to C-9. The fixes stop them from paying a stranger's loan, or approving USDG to another pool because of a .env.

details
  • securitypriors-v2 finds only identities minted to the key. It took an identity transferred to the key as its own, so repay could pay the sender's loan and join used their identity. Any other identity needs PRIORS_AGENT_ID (C-3).
  • securityrepay(loanId, { agentId }) requires the caller's agent, and refuses a loan of an agent the key does not control before any approval (C-4).
  • securityOn a real chain, an RPC from a .env must be one of the public endpoints .env.example lists (C-5). The v1 tools' POOL, TREASURY and USDC must match the published record (C-6).
  • fix.env names are compared case-insensitively (C-7). A malformed key is never printed (C-8). --agent is refused, because PRIORS_AGENT_ID names the identity (C-9).
  • sourcesdk/priors-v2.mjs · sdk/env.mjs · docs/SECURITY-v2.md · the CLI ships with the repository
sdkmcp@priors/x402 0.2.5@priors/mcp 0.2.5

@priors/x402 and @priors/mcp 0.2.4 and 0.2.5

Two releases from private reports. They fix how the packages tell one purchase from another, and they count a borrow whose answer was lost.

details
  • security0.2.4: a purchase is its method, its URL without the fragment, and its body. Before, a POST with another body to the same URL took the first one's authorization, never quoted or checked against its own max_price_usd (P-19, GHSA-xqp9-cg7h-rp2w).
  • fix0.2.4: a borrow whose answer is lost throws BORROW_UNCONFIRMED with the amount. pay_url and borrow count it against the session total and tell the agent to check credit_status and repay it (P-18, GHSA-v9xj-6mf2-7mqh).
  • security0.2.4: resend() no longer follows a redirect when init names redirect: undefined (P-17, GHSA-rg6j-jw3v-c4qg, also GHSA-jqph-h7c9-qw5w).
  • fix0.2.4: after an issuer burn from the stock vault, a stock position is shown and valued at what the vault would pay it.
  • security0.2.5: a JSON body is one purchase by its exact value, every number kept. 0.2.4 keyed a body holding a number of 16 or more digits by its bytes, so the same body spelled another way could be signed twice (P-22, Medium, GHSA-7m69-w9rm-jwwr).
  • securityThe hosted MCP at mcp.priors.trade wraps the listings from find_services in one random-id fence and cleans names and descriptions to one line. Links must be https and payTo an address (P-20, GHSA-8vwf-fj4w-5v29).
  • changedBOUNTY.md says what counts as a loss in the client packages: a second signature for one purchase, a payment over a cap, to another address or on another chain, or a borrow the caps do not count. That is Medium, one award per root cause. One authorization within the caps, settled once, is not a loss.
  • sourcenpm: @priors/x402 · npm: @priors/mcp · docs/SECURITY-v2.md
contractsTreasurySponsorV4

Treasury v4: $100 of new lines a week

The Safe raised the treasury's weekly limit on new first lines and raises from $25 to $100 at 08:55 UTC, after the change to two agents per wallet below. That is room for up to 20 first lines of $5 a week, as long as the treasury has free stake to back them.

details
  • changedepochCap is 100 USDG per 7-day epoch, first lines and raises combined, up from 25. The first line stays $5 and the second line $25 (tx 0xdd7c…a4f2).
  • changedThe reserve share of each sweep is 0, down from half, so sweep() stakes all the USDG the treasury receives behind its root, as backing for new lines.
  • changedThe treasury keeps the sponsor fees on its lines. feeSink is the treasury itself, so collect() sends the fees there and the next sweep() stakes them (tx 0xe8fe…6d47).
  • securityThe weekly limit still bounds the treasury's new exposure, now at $100 a week instead of $25. Every automatic first line still has its own 5 USDG bond (two agents per wallet).
  • sourceTreasurySponsorV4 0x0c50…D573 · src/TreasurySponsorV4.sol · T10 in docs/SECURITY-v2.md
stockscontractsStockVault

Stock vault: a close gives its line back to the weekly budget

The 2-of-3 Safe upgraded the stock vault for SV-15, a Low finding. A close requested while a loan was open never gave the line back to the vault's weekly budget, so four such cycles could fill the $1,000 cap with nothing open. No funds were at risk, and no position had been opened.

details
  • fixA close requested with a loan open keeps its refund (closeRefund) until the last repayment, which gives the line back to the epoch budget. GHSA-f8mq-9j3m-c2f4.
  • changedImplementation 0x32F1…d0A5, from block 77,234,587 (tx 0x7c42…4adc, 08:33 UTC). The vault's address stays 0xbEcd…02B6.
  • fixThe upgrade before it, on 2026-09-30 (tx 0x13a3…4446, implementation 0x8Be0…34fA), fixed SV-13 and SV-14 (GHSA-cwm2-g4fh-wvf2, GHSA-wh68-cx3m-5r7p). After an issuer burn, a deposit into a token the vault is short of is refused, and a line is valued at what its position would be paid.
  • sourcetest/StockVaultEpochRefund.t.sol (8 properties) · docs/SECURITY-v2.md
securityinvite bot

Two agents per wallet

Each owner address can now get two automatic first lines from the treasury instead of one, in Go mode and Builder mode. Each line still needs its own 5 USDG bond, and the treasury's weekly limit on new lines is unchanged.

details
  • changedThe invite bot signs up to two automatic invites per owner address, one per agent. An address waits until its first invite is used before it gets the second. A third agent from the same address is refused, and can start with a stock line instead.
  • changedThe start page lets an account create its second agent, then points to a stock line.
  • securityEvery first line is backed by its own 5 USDG bond, forfeited if the agent defaults. A default on one agent stops new loans for every agent of the same owner. All new first lines and raises together stay within the treasury's weekly limit, so more agents per address does not raise the total the treasury can lose in a week.
scoreScore v2 inputs

Score v2: a change of hands after v1 history restarts the record

Score v2 restarts an agent's record when the agent changes hands. It saw a change of hands only through the owners of v2 loans, so an agent sold after its v1 history kept that history. Found by Priors' own audit (S-2, Info).

details
  • fixThe inputs read the agent's last transfer on the identity registry (ownerSince), since v1 loans carry no owner. A transfer before every v1 loan, the mint, changes nothing, and an agent with no v1 loan is read from its v2 loans as before. No agent is known to have changed hands after its v1 history.
  • sourcedocs/SCORE-v2.md · sdk/score-v2-inputs.mjs · S-2 in docs/SECURITY-v2.md
contractsSeatVaultV4

Bigger lines: $50, with $PRIORS at stake

An agent with 10 or more repaid loans can now get a $50 line with a seat of $PRIORS behind it, most often its owner's own. If the agent defaults, half the seat burns and the rest goes back to the staker. The vault's USDG backs every line in full, so lenders are never reached.

details
  • newSeatVaultV4 at 0xb1c3…2192, root #6466, owned by its own SeatSizer (0x97C4…8777), which the 2-of-3 Safe owns. 20 seats, at most $1,000 of new lines a week, loans of at most 7 days.
  • newA seat is about five lines' worth of $PRIORS, sized by the vault's SeatSizer from a day-long median of the $PRIORS pool and kept between 110,000 and 20,000,000 $PRIORS. The Participate page shows the current size.
  • changedParticipate now offers this vault's seats. The $5 seats on SeatVaultV3 (0x59D1…80a9) keep running until they close.
  • newCLI: priors join --seat accepts a staker's offer on either vault, and priors status shows the seat wherever it is.
  • securityReviewed twice before deployment, fixes in. The slash split and protocol seats are built but off. The deployed code is the published source (SeatVaultV4.sol).
securitypriors.trade/account

Your account goes by a name, not your email

The account pages no longer show the Google account you signed in with. Your Priors account gets a name of its own, drawn at random, and you can change it on your account page to any name no other account holds.

details
  • securityThe sign-in no longer hands your email to the pages: the header, the account page and the start and Stocks pages show the account's name instead, and a browser that kept the email from before no longer shows it.
  • newA name like mossy-cedar-417 the first time you sign in, the same on every device. Edit name on the account page changes it: 3 to 20 letters, digits, - or _, unique whatever the letter case. Only you see it. priors.trade/account
  • fixSigning in with Google on the start page makes your wallet: it no longer stops at "Making your wallet…".
sdkmcp@priors/x402 0.2.0@priors/mcp 0.2.0

@priors/x402 and @priors/mcp 0.2.0: stock lines

The npm packages read the stock vault with no setup: the tokens it accepts, whether it lends on each right now, and the collateral behind an agent's stock line.

details
  • new@priors/mcp: stock_assets (the accepted tokens, their Chainlink value, their loan-to-value, any lending hold) and stock_position (an agent's deposit and what its line can draw now). credit_status shows a stock line's collateral, and what it can draw is capped at what the vault allows.
  • new@priors/x402: robinhood.stockVault is the live vault, so creditStatus carries a stock line's collateral and stockPosition() and stockAssets() work without an address.
  • fix@priors/mcp sends one JSON-RPC call per request. The public node answers a large batch with HTTP 429, so a tool that reads many things at once (stock_assets, credit_status on an agent with a long record) could wait for minutes; it now answers in about a second.
  • sourcenpm: @priors/x402 · npm: @priors/mcp · packages/
stockscontractsStockVault

Stock lines are live

An agent can now borrow against Robinhood stock tokens. Its owner deposits one of 35 accepted tokens and the stock vault backs a line against it, valued by Chainlink. Loans on it are ordinary pool loans: same fee, same terms, same default rules.

details
  • newStockVault at 0xbEcd…02B6, root #6424, behind a Transparent proxy whose admin is the 2-of-3 Safe. It is the one upgradeable Priors contract; what the Safe can and cannot do is in SECURITY-v2.
  • newEach stock lends at its own share of its value: 50% for index funds, T-bills and the largest names, 40%, 30% or 25% for the more volatile ones, with a cap on open lines per token (stock-ltv.4663.json). A line is at most $250.
  • newA better record needs less collateral: fees paid on treasury-backed loans add up to 15 points on a 50% stock, scaled down on riskier ones, never above 70%. Loans on the agent's own stock line never count toward it.
  • newEvery new loan is checked against the collateral's value at that moment. New credit waits during a lending hold: a sharp move against the last 14 days, a pending split or multiplier change, a paused or blocked token. Repaying and closing never wait.
  • newClosing gives every token back, at once with no loan open, otherwise with the last repayment. A default seizes the deposit.
  • newSDK: stockAssets(), openStockLine(), closeStockLine(), and the stock tokens in status(). On npm, @priors/mcp 0.2.0 has stock_assets and stock_position (see the release).
  • securityReviewed before deployment; findings SV-1 to SV-12 and their fixes are listed with their tests in SECURITY-v2.
  • sourcesrc/StockVault.sol, tests in test/StockVault.t.sol and StockVaultLtv.t.sol, the 35 tokens and their feeds in stock-assets.4663.json.
scorescore 2.0.1

Score v2 weights 2.0.1

A loan backed by the agent's own stock is the agent's own money, so it doesn't count as risk someone else took on it.

details
  • changedA loan the stock vault backs counts as the borrower's own money, not as risk someone else took. No weight changes. While the vault is live, v2 scores are published under 2.0.1 only.
  • sourcedocs/SCORE-v2.md.
scorex402score 2.0.0

Priors Score v2 is live

A second score beside the on-chain one. It counts only risk someone else took on an agent, and reads x402 income from the chain, whoever settled the payment. Every point comes with its reason.

details
  • newpriors.trade/api/score-v2: every agent's score, rung and components, each with the reason it counts, refreshed every few minutes. ?agent=<id> for one agent.
  • newOut of 1000: money others held at risk on the agent (300), week-long loans backed by someone else (200), backing by others (150), age (100), debts it covered for agents it vouched for (100), x402 income (150).
  • newx402 income: payments to the agent's wallets in the last 30 days, from payers that aren't its own and paid at least 1 USDG, capped per payer and weighted by the payer's own record. Money sent back doesn't count. A loan repaid from income counts up to 25% more.
  • newPayments are read on chain from block 71,702,460 (pool v2), through any facilitator, not only ours.
  • newShown on every agent's page, in the paid API's /v1/score and /v1/report, and by score_of on the hosted MCP and in @priors/mcp 0.1.7.
  • changedNothing on chain: the on-chain score in ScoreLib and CreditLensV2 is unchanged.
contractsSeatSizer

The seat vault sizes its own seats

SeatSizer now owns the seat vault. It keeps a $PRIORS seat worth about five lines on its own, from a day-long median, inside fixed bounds.

details
  • newSeatSizer 0xd24B…5E61, deployed at block 72,572,884. The Safe owns it, and it owns SeatVaultV3.
  • newIt records the $PRIORS pool on Uniswap V4 at most once every 29 minutes, and resizes from the median of the last 24 hours (at least 24 observations).
  • newA raise goes straight to the target. A cut at most halves the seat, once a day. The seat stays between 10,000 and 2,000,000 $PRIORS.
  • newIf the ceiling would leave a default's burn under 1.5 lines, seats pause.
  • securityIt can change the seat size and that pause, nothing else: the Safe reaches every other vault power through execute, and renouncing ownership reverts. Review findings SZ-1 to SZ-7 were fixed before deployment or are bounded: SECURITY-v2.md.
  • sourcesrc/SeatSizer.sol · test/SeatSizer.t.sol · test/SeatSizerFork.t.sol, which runs against live chain state
contractsSeatVaultV3

Seat vault v3

The vault's levers now reach seats that are already open, and a seat is bound to the owner who accepted it.

details
  • newSeatVaultV3 0x59D1…80a9, block 72,192,188. SeatVaultV2 is retired, empty and paused.
  • fixV-2: a pause, or a new seat size, burn or line, now reaches open seats. canBorrow refuses new loans on a seat below the current terms.
  • fixA seat is bound to the owner who accepted it: a sale stops lending, and anyone may close the seat, every token back to the staker.
  • newfreezeSeat lets the Safe close any seat, every token back, never a burn.
  • sourcesrc/SeatVaultV3.sol · test/SeatVaultV3V2Fixes.t.sol (V-2's three proofs of concept, each failing on V3) · 518 tests passing
contractsInviteBond

An automatic invite for a 5 USDG bond

Post a refundable 5 USDG bond from the wallet that owns the agent, prove you own it, and the invite bot signs a treasury invite on the spot.

details
  • newInviteBond 0x8BE4…3275, block 72,112,874, no admin. It replaced the first deployment the same day, so a new owner's bond replaces a stale one instead of being locked out.
  • newThe bond comes back after 3 qualified repayments with none open, or 4 days after it was posted if the agent never got a line. A default sends it to the Safe.
  • fixIB-1: the bot signs only while the bond cannot come back before the invite expires.
  • sourcesrc/InviteBond.sol · test/InviteBond.t.sol
mcpapimcp.priors.tradeapi.priors.trade

Hosted MCP and a paid API

Any AI agent can read a Priors record over MCP with no key, or buy it per call over x402.

details
  • newmcp.priors.trade/mcp: Streamable HTTP, read-only, no key. An agent's record and score, the pool's figures, recent loans, and services that take x402. claude mcp add --transport http priors https://mcp.priors.trade/mcp
  • newapi.priors.trade: /v1/score/{id} and /v1/report/{id}, x402 v2, 0.03 USDG a call, settled through facilitator.priors.trade. An unpaid call answers 402 with the terms in its PAYMENT-REQUIRED header.
  • securityBoth are in the bug bounty's scope.
x402facilitator.priors.trade

The Priors facilitator

An x402 facilitator for USDG on Robinhood Chain. Merchants sign up themselves at x402.priors.trade.

details
  • newPOST /verify and /settle with a merchant key; GET /health is open. It settles only to the merchant's registered payTo, from 0.01 USDG, never payer to self.
  • new20 free settles a UTC day per merchant, then 0.015 USDG a settle from a prepaid balance.
  • newA settlement whose receipt is late is answered pending, not failed, and one authorization is never submitted twice.
  • newPayments are EIP-3009 TransferWithAuthorization on USDG, 65-byte EOA signatures for now. It isn't the only facilitator on the chain: the merchant picks.
  • sourcedocs/FLOAT.md
sdk@priors/x402 0.1.3@priors/mcp 0.1.6

@priors/x402 and @priors/mcp on npm

Pay x402 in USDG from code, or run an MCP server that lets an agent pay, borrow and repay with its own wallet.

details
  • newFirst published at 12:31 UTC; @priors/x402 reached 0.1.3 and @priors/mcp 0.1.6 the same day. npm i @priors/x402 installs the payer (createPayer({ signer }).pay(url)); npx -y @priors/mcp runs the server.
  • securityhttps only: private and local addresses are refused before the request and again at connect time, and redirects are never followed.
  • securityMoney calls run one at a time, within session totals (PRIORS_MAX_SPEND_USD, PRIORS_MAX_BORROW_TOTAL_USD). A pending payment is resent, never signed twice.
  • fixRepay only pays loans of the agent the wallet controls (NOT_CONTROLLER).
  • changedOlder versions are deprecated on npm: @priors/mcp below 0.1.6, @priors/x402 below 0.1.3.
  • sourcenpm: @priors/x402 · npm: @priors/mcp · packages/ · findings P-1 to P-9 in SECURITY-v2.md
sdkpriors-v2

SDK and CLI on v2, with x402 float

A v2 client and CLI, and an x402 client that pays from the balance and borrows only the shortfall from the agent's line.

details
  • newnpx priors-v2 join | borrow | repay | status, with addresses from deployments/4663.v2.json.
  • newsdk/priors-v2.mjs for lenders, stakers, backers and agents: every write is simulated first, and consents are checked against the pool's own digest.
  • newsdk/float.mjs: pay(url, { agentId, maxBorrow }). Authorizations last at most 600 s, and a pending payment is resent, not signed again.
  • sourcedocs/FLOAT.md · docs/PARTICIPATE.md
securityBOUNTY.md

The bug bounty moves to v2

Critical $3,000, High $1,000, Medium $250, public credit below that. Every known v2 finding is listed with its test.

details
  • newIn scope: the v2 contracts at their live addresses, SeatVaultV3, InviteBond, the npm packages, the hosted MCP and the paid API.
  • newdocs/SECURITY-v2.md: each finding with its fix or what remains, and the test that shows it.
  • changedThe Safe lowered treasury v4's caps from their launch values of $100 and $50 to $25 of new lines per 7-day epoch and a $25 second line (tx 0x940d…8cb9).
  • sourceBOUNTY.md · report privately through GitHub's vulnerability reporting
contractsCreditPoolV2CreditLensV2

Pool v2 is live

Every credit line is 100% backed by a backer's locked pool shares. A default burns them, principal and fee, so no path has been found for a loan loss to reach lender principal. That assumes the ERC-8004 registry, which its owner can upgrade, and USDG, an upgradeable token, keep working as they do today; the contracts have had no outside audit.

details
  • newCreditPoolV2 0x2812…DE21 with PoolV2Lib, and CreditLensV2 0x9d70…3D9B for scores and reports, from block 71,702,460 (21:45 UTC).
  • newA line needs the agent owner's EIP-712 consent. With no loan open, an agent can move to another sponsor.
  • newThe owner is a 48-hour TimelockController 0x5d98…F87c; the Safe proposes and executes. The Safe is guardian: a pause lasts at most 14 days, and exits never pause.
  • newLoans of $5 to $500 for 1 to 30 days, with 3 days of grace. The fee is 1% per 30 days, pro rata, split 60% to lenders, 25% to the sponsor and 15% to the reserve; a sponsor may add a premium of up to 2% per 30 days.
  • fixBefore launch: N-1, a self-backing loop that took lender yield (a loan's fee is now locked in the backer's stake); N-2, a utilization-cap freeze (the cap is 100%); F-1, a farmable keeper bounty (set to 0).
  • changedEvery v1 repayment record was imported (importFromV1), and v1 is paused.
  • sourcesrc/CreditPoolV2.sol · test/CreditPoolV2Invariants.t.sol · 404 tests passing at release
contractsTreasurySponsorV4SeatVaultV2

Three ways onto the ledger

A treasury invite, a $PRIORS seat, or a backer who stakes USDG and vouches directly.

details
  • newTreasurySponsorV4 0x0c50…D573: $5 against an invite, a second line once seasoned (3 qualified loans, 14 days, a score of 100 or more), idle lines reclaimed after 30 days. Invites use EIP-712 domain "Priors Treasury", version 4.
  • newSeatVaultV2 0x6D93…6B5F: a staker's $PRIORS seat backs a $5 line, the agent needs 3 repaid loans, and half the seat burns on a default. Replaced by V3 the next day.
  • fixX-1: offers are bound to the agent's owner. X-2: idle seats expire after 30 days.
  • newAnyone can run a root with $10 or more of stake and vouch for an agent, with its consent.
  • sourcesrc/TreasurySponsorV4.sol · src/SeatVaultV2.sol
contractsTreasurySponsor v3

A first line needs an invite

Treasury v3 opens a first line only against an EIP-712 invite from a key the treasury's owner named. Registration stays permissionless.

details
  • newTreasurySponsor v3 0x59f2…77Df.
  • newfirstLine(id, expiry, invite): an invite names one agent and a deadline. NotInvited, InviteUsed and InviteExpired decode to sentences in the SDK, which gained signInvite() and parseInvite().
  • newscripts/verify-migration.mjs checks each deployed contract's runtime bytecode against the compiled artifact.
securityBOUNTY.md

A bug bounty

BOUNTY.md: rewards for valid findings in the live contracts.

contractssecurityCreditPool

The reviewed pool, with every record carried across

CreditPool isn't upgradeable, so the review's fixes shipped as a new pool, and every agent's repayment history came with it.

details
  • newCreditPool 0x0259…44e5 at block 68,593,823, with TreasurySponsor 0x9338…4daC and ReserveFunder 0x3234…B72d, owned by a 2-of-3 Safe.
  • fixunvouch is bounded by drawn principal; a dead root's earmarked stake is charged before the reserve; a settled, defaulted root can take its own stake back; duration parameters and importRecords are bounded.
  • fixAdopting an orphaned agent now requires it to owe nothing. An invariant at depth 400 found that one.
  • newAn early-exit fee: 0.5% inside 7 days, zero after. It is a constant, not a parameter, and the hold clock is share-weighted, so a dust deposit can't restart it.
  • securityAdvisory GHSA-4j38-23rc-qmv9, credited to llen, showed two of these defects in the previous pool's bytecode; they were already fixed in source. Its proposed invariant is now in the suite.
  • sourcetest/AuditHardening.t.sol · SECURITY.md · 123 tests passing
sdkpriors

Reverts that say what broke

The SDK asks the contract for fees, decodes all 34 custom errors, and simulates every write before it spends gas.

details
  • changedquote() calls the pool's quoteFee and reports withinTermLimits and withinSizeLimits.
  • newexplainRevert(); firstLine, raise, borrow, repay and register run a staticCall first.
  • fixGas estimates get 25% headroom; unused gas is refunded.
contractsCreditPool

Live on Robinhood Chain

The credit pool goes live on mainnet: ERC-8004 agents borrow USDG against their repayment record.

details
  • newCreditPool 0xd970…aC95 at block 67,729,526 (06:35 UTC), with a TreasurySponsor and a ReserveFunder.
  • fixThe same morning: a root's earned credit could be spent twice after a default. Whatever a root's stake cannot cover is now written off against what it earned, so the reserve backs it once.
  • changedThe fix shipped as a new pool, 0x4B9f…d122 at block 67,845,567. importRecords carried the repayment history across: reputation only, sealed on the first deposit.
  • fixmarkDefault consumes only the liable slice of backing for each loan.
  • sourcetest/ReviewPoC_RootEarnedDoubleSpend.t.sol · test/DefaultAccounting.t.sol
sdkpriors

Failover, and a broadcast sent once

RPC_URL takes a list of endpoints tried in order, and a transaction broadcast is never retried.

details
  • newEndpoints are tried in priority order, each attempt capped at 6 s. A node that refuses to serve moves on; a revert does not.
  • fixA broadcast is attempted exactly once, because a retry could pay twice.
  • fixregister() reads the agent id from the ERC-721 mint made to the caller.
securitySECURITY.md

A security policy, and CI on every push

Private vulnerability reporting on GitHub. Every push runs forge fmt, build and test, npm test and the publish guard.

contractssdkpriors 0.1.0

The repository goes public

Contracts, SDK, CLI and an agent skill. npm run quickstart walks a fresh agent through a loan and a score on a local chain.

details
  • newskills/priors: tell a coding agent "give my agent a credit history on Priors". AGENTS.md carries the same for other harnesses.
  • newScore v1 in ScoreLib: up to 400 points for dollar-days repaid, 200 for loans held 7 days or more, 150 for backing, 150 for age and 100 for recourse honored. An agent's own default is 0.
  • newA publish guard that fails the build on a tracked key or credential.
  • sourceREADME.md · src/libraries/ScoreLib.sol · skills/priors/SKILL.md