The self-driving treasury that can't run off with the money
Idle treasuries earn nothing while payroll is a manual spreadsheet. Handing an LLM the wallet fixes the idleness and creates a worse problem: it can be talked into signing the wrong thing.
Thesauros is that fix, done safely. Reasoning proposes; a pure, deterministic policy engine disposes. Every move needs a signed AllowReceipt from that engine, and you can freeze the treasury at any time. The power stays in your hands.
Thesauros keeps a runway buffer liquid and deposits the rest into allowlisted vaults, balancing yield against obligations due today.
Freeze, revoke and sweep home work even if the model or the backend is down. They never call the reasoning layer — the owner always wins.
Freeze, revoke and sweep-home work even if the LLM, SERV, or the worker is down. They never call the reasoning layer — a stopped agent can never stop you from stopping it.
Every claim below cites something real and checkable — not a testimonial, a receipt.
Prompt-injection and compromised-model attacks run live against the real reasoning layer and policy engine, not a mock: 10/10 adversarial cases held.
An over-cap payment and a payment to a non-allowlisted address, fired through the real gather -> simulate -> evaluate pipeline against Arc testnet — both DENY, rule codes R06 and R05.
Every one of the 22 rules (R00-R22), branch-tested: 100% statement, branch, function and line coverage. Deny-first (I5) — an unknown kind, a parse error or a thrown exception all fail closed.
Every decision is explained, verified, and replayable in your Thesauros treasury.