Solana IAM Protocol

Fuin

Programmable authorization for Solana. Issue scoped keys to AI agents and delegates - custody stays with you.

The Problem

Delegation shouldn't mean losing custody.

Traditional wallets operate on an all-or-nothing model. Fuin introduces a programmable layer that lets you issue highly restricted session keys to AI agents or human delegates. They can transact on your behalf, but only within the exact boundaries you define.

  • Prevent AI hallucination-led exploits
  • Zero gas fees for delegates (Relayer pays)
  • Revoke access instantly on-chain
Vault Configurations
DelegateActive
Trading Bot (Agent)
Cap
20 SOL / Day
Allowed
Jupiter, Meteora
DelegateRevoked
Junior Wallet

Core Primitives

A robust, composable architecture designed for security, auditability, and seamless meta-transactions on Solana.

Engine

On-chain Policy Engine

The heart of Fuin. A modular system enforcing constraints before execution. Guardians can compose rules using distinct modules.

Spending Module
Enforce daily caps and token whitelists. Verifies via Pyth/Switchboard oracles.
Program Module
Strict allowlists for target programs (CPIs) preventing malicious interaction.
Time Module
Epoch-based rate limits and expiration logic for temporary sessions.
Risk Module
Max slippage controls and anomaly detection for DeFi operations.

GasTank PDA

Guardians fund a central PDA. The protocol automatically refunds Relayers for gas upon successful intent execution.

Deterministic Routing

Agents are restricted to predefined `Route` enums (e.g., JupiterSwap, MeteoraLP) to guarantee execution paths.

Replay Protection

Every meta-transaction enforces a monotonic nonce counter to prevent duplicate intent submissions.

ed25519 Intents

ERC-4337 style meta-transactions. Users sign intents off-chain, verifying signatures natively on execution.

Network Participants

System Actors

The Owner

Guardian

Creates vaults, sets strict policies, deposits gas, and retains ultimate control to freeze or rotate keys.

The Beginner

Junior

A human operator acting under daily allowances, spending limits, and strict program whitelists.

The Autonomous Bot

Agent

An AI operator cryptographically locked to predefined audited routes to prevent exploits driven by hallucination.

The Courier

Relayer

A non-custodial entity that packages and submits intents to the network, automatically receiving gas refunds.