Orien docs

Overview

Orien sits between a human and an autonomous agent that spends money. It does two things:

• Guardrails. A policy wallet on Robinhood Chain that enforces a per-transaction ceiling, a rolling daily budget, a contract and vendor allowlist, and a withdrawal lock. The agent cannot talk its way past any of them.
• Cover. A policy that pays out when a loss happens anyway — a wrong recipient, a malicious contract, an injected instruction, a duplicated payment.

Orien is non-custodial. It never sees a private key or seed phrase, and every state change is a request your wallet approves.

Quickstart

• Install MetaMask.
• Open Insure an agent and press Connect wallet. Orien asks MetaMask for your address and, if needed, offers to add Robinhood Chain.
• Set the deposit, pick a cover tier, and set the agent's permissions.
• Press Sign policy. Your wallet signs the terms. This costs no gas and moves no funds.

Network details

Taken from Robinhood's own documentation. Robinhood Chain is a permissionless, Ethereum-compatible L2 that uses ETH for gas.

Adding it yourself

await window.ethereum.request({
  method: 'wallet_addEthereumChain',
  params: [{
    chainId: '0x1237',                       // 4663
    chainName: 'Robinhood Chain',
    rpcUrls: ['https://rpc.mainnet.chain.robinhood.com'],
    nativeCurrency: { name: 'Ether', symbol: 'ETH', decimals: 18 },
    blockExplorerUrls: ['https://robinhoodchain.blockscout.com']
  }]
});

Only trust RPC hosts under chain.robinhood.com. Look-alike domains are not Robinhood's.

Reading the chain

Every network figure on this site is read live over JSON-RPC. There are no cached or invented numbers — if the node is unreachable, the interface says unavailable instead of showing something plausible.

curl -s https://rpc.mainnet.chain.robinhood.com \
  -H 'content-type: application/json' \
  -d '{"jsonrpc":"2.0","id":1,"method":"eth_blockNumber","params":[]}'

The same call in the browser is what drives the live strip on the home page:

const res = await fetch('https://rpc.mainnet.chain.robinhood.com', {
  method: 'POST',
  headers: { 'content-type': 'application/json' },
  body: JSON.stringify({
    jsonrpc: '2.0', id: 1, method: 'eth_blockNumber', params: []
  })
});
const { result } = await res.json();
console.log(parseInt(result, 16));   // latest block height

Connecting a wallet

Orien discovers wallets two ways: the modern EIP-6963 announcement, and the legacy window.ethereum injection, preferring MetaMask when several are present. Connecting shares only your public address.

After connecting, Orien checks the chain ID. If you are not on Robinhood Chain it asks to switch, and if your wallet has never seen the network it offers to add it first.

Changing wallet

The Change wallet button in the wallet menu re-opens MetaMask's own account picker, so you can move to a different account without disconnecting:

// re-open MetaMask's account picker
await window.ethereum.request({
  method: 'wallet_requestPermissions',
  params: [{ eth_accounts: {} }]
});

Disconnecting properly

Most sites "disconnect" by forgetting your address locally while staying connected inside MetaMask, which means you have to go and remove them by hand. Orien revokes the permission for real:

// what Orien's Disconnect button calls
await window.ethereum.request({
  method: 'wallet_revokePermissions',
  params: [{ eth_accounts: {} }]
});
// MetaMask now drops the site from Connected sites.

After that, Orien is gone from MetaMask's Connected sites list and the next visit has to ask permission again. If your wallet is too old to support wallet_revokePermissions, Orien signs you out locally and tells you plainly that you will need to remove the site in MetaMask yourself — it does not claim a revoke that did not happen.

Permissions

Four rules, enforced below the agent rather than asked of it:

• Max transaction — a hard ceiling on any single outbound transfer.
• Daily limit — a rolling budget that resets on your clock.
• Approved protocols — an allowlist of contracts and vendors. Everything else is refused by default, including token approvals.
• Withdrawals — off by default, so the agent can spend but never cash out.

A max transaction above the daily limit is meaningless, so the interface clamps it for you.

Cover & claims

Premiums are quoted against a $500 reference float and scale linearly with the deposit: $1.99 for half the float, $4.99 for all of it. Cover applies to losses caused by the agent's own behaviour inside the rules you set:

• Funds sent to a wrong, stale or hallucinated address
• A malicious contract the agent was tricked into calling or approving
• Prompt injection that redirected a run
• A permission boundary that failed to hold
• Duplicated payments and other plain agent errors
• Failures by a sub-agent your agent delegated to

Not covered: deliberate transfers by the policyholder, and market losses on trades that simply went the wrong way. Policy terms govern; this page is a summary.

Status

Orien is experimental software in open beta. Cover is subject to policy terms, limits and jurisdiction, and nothing here is financial, legal or insurance advice. Anything on the site labelled simulated is a scripted demonstration.

Questions or bug reports: @tryOrien.

FAQ