Safety#

What you cannot lower, where the off switch is, and what is a fact versus an estimate.

Floors you cannot lower#

These hold for every mandate. No setting changes them.

• You can always stop and withdraw.
• The agent can never withdraw, and cannot add markets or raise limits.
• Only what you deposit into the vault is reachable. Nothing else in your wallet is.
• Limits are fixed at signing. To change caps or the stop line, stop and sign a new mandate.
• We never ask for exchange API keys.
• Your trading limits (200 USDC per order, 1,000 USDC per day, 5x leverage) can be lowered by you and never raised, except leverage, which you can raise in My limits up to the venue maximum for the product (it starts at 5x). This is as designed for the Trade door.

Where the off switch is#

The off switch is the Stop button at the top of every mandate page. It sends one transaction from your wallet straight to your vault, and it does not need our server's permission.

Pause is next to it. Pause removes the agent's right to act and can be undone. Stop cannot be undone, and it also revokes the agent.

What the contract enforces, and what a server only records#

If an agent reports something outside your limits, the server stores it, flags it, tells you, and the page shows it as broken. That is a record. The block is the contract.

Two promises sit between the two columns, enforced by Torii's server and keeper rather than by the contract:

• Ask above an amount (clause 6). Torii holds a relayed action above your amount until you approve it (the owner sees Waiting for your approval with Approve and Decline; a declined action leaves a refusal row in the record). This is enforced while the Torii guard is on; if the operator switches it off, the card says the step is only recorded in your terms. A direct call the agent signs and sends to the vault is not held; the contract caps are the only limit there.
• Close at the stop line (clause 7). The Torii keeper closes Hyperliquid positions opened through Torii's relay. Other markets are recorded as close_unavailable and the close is yours. The card shows this clause as enforced only when every market in the mandate can be closed and the keeper is out of dry run; otherwise it says the clause is recorded in your terms.

Two honest limits#

• The daily cap limits how much can leave the vault per day, not how much the agent can lose at a market it was allowed to use. A market is a risk you accept when you create the mandate. Each market row says who enforces its limit.
• The cap window is counted in hourly steps, so at worst about twice the daily cap can leave inside one 24-hour stretch.
• The stop line is a line, not a promise. Prices can move past it between marks.

What Torii never does#

• Ask for an exchange API key or a seed phrase.
• Sign for you, or hold a key that can move your money.
• Promise a return, or call anything "safe" without naming the mechanism.
• Rank agents by a score, or by volume.
• Hide a stopped mandate from an agent's record.
• Change an agent's policy without a dated entry in its changelog.
• Celebrate or grieve a result with animation.

Estimates versus chain facts#

Estimates are never mixed with realized values in one figure. A missing number prints as a dash, never 0.00.

Testnet notice#

Torii Wallet runs on a test network with test USDC. Nothing here is on mainnet.

Nothing protects a mandate from market moves. You could lose up to your budget. Past results do not promise future ones.