DEX Executor

The DEX Executor is a Smart Policy for swaps. 6.1m = named pair. 6.1a = Heat scan. Tokens stay in your wallet.

The Chatito DEX Executor is a Smart Policy for swaps: a signed, capped rule that can trade for you without taking your tokens.

Your wallet stays the wallet. The policy records who opened the grant, what it may spend, how much is left, and when it expires. When a buy runs, one transaction swaps and sends 100% of the output back to you.

This is the DEX analog of a trade-only exchange API key. It is not a vault. It is not "deposit into a smart contract." You stay the custodian.

Three doors: 6.1m, 6.2h, 6.2a

The letter is the job, not a quality score. The app picks the door from the book you create. You do not mix them.

Same Smart Policy rules on all three: cap, expiry, revoke, recipient is you, grant is not Live.

Heat on MetaMask is 6.2h, not Chatito Agent. 6.1a is a leftover AUTO Heat-scan contract. Do not treat it as the current Heat door.

Why We Built It This Way

Most "leave it running" DEX products pick one of the bad options. We refused them.

Instead you sign a Smart Policy: a capped, expiring spend grant. Chatito may then spend only inside that policy, and only send the result to your address.

How A Swap Works

6.1m

You (once per strategy)
  sign a Permit2 allowance to the Executor
  + open a grant (spend token, exit token, caps, expiry)
        |
        v
  Tokens stay in YOUR wallet.
  The Smart Policy stores the rule. Nothing to withdraw later.
        |
When the strategy wants a buy or sell
        |
A Chatito keeper calls executeSwap
        |
Same transaction:
  pull the grant amount
  swap on an allowlisted router
  send every output token (and leftover) to YOU

6.2h (MetaMask Heat, Base)

You (once per strategy)
  atomic wallet_sendCalls batches of <=10
  Permit2 home + each Heat name in the snapshot + openGrant
        |
        v
  Tokens stay in YOUR wallet. Roster is the signed box.
        |
When Heat wants a buy or a sell of inventory this grant bought
        |
A Chatito keeper calls executeSwap on the 6.2h executor
        |
Same transaction:
  pull the grant amount
  swap on an allowlisted router
  send every output token (and leftover) to YOU

Sibling Heat chains stay parked. MetaMask will not attach Chatito Agent (that door is 6.2a).

6.2a / leftover 6.1a (Chatito Agent Heat)

You (once per strategy)
  attach Chatito Agent on THIS wallet (EIP-7702), if the wallet will
  + open a grant (spend token, cap, expiry)
        |
        v
  Tokens stay in YOUR wallet. No pocket. No second address.
  The grant records inventory of bags it bought.
        |
When the scanner wants a buy or a sell of that inventory
        |
A Chatito keeper calls executeSwap on YOUR wallet
        |
Same transaction:
  spend only inside the grant box
  swap on an allowlisted router
  output stays in YOUR wallet

If the swap reverts, nothing is left sitting in a Chatito contract.

Hard Rules (On Purpose)

These are product rules, not marketing.

• No deposit. There is no "send tokens to Chatito" step.
• No withdraw-to-Chatito. Admin cannot sweep user assets.
• Not an upgradeable vault. A Smart Policy is a thin rule, not a proxy you have to trust forever.
• Recipient is you. The wallet that opened the grant is the immutable recipient.
• Rescue only to the owner. If something lands by accident, it can be sent only to the grant owner.
• Routers are gated on-chain. The keeper cannot call a random contract.
• On-chain remaining + expiry. Our database is a cache for the UI. The lock lives on the chain.

Grant Is Not Live

Opening a grant does not arm the strategy.

Live is a separate, human-only switch. Wizards, AI Lab, and agent keys cannot turn Live on for you.

You can revoke the grant (or wait for expiry). After that the bot cannot spend. Tokens never left your wallet in the first place.

Revoke does not turn Live off. The strategy stays Live (if it was) and falls back to manual Sign — you Sign each action yourself.

Where The Policy Lives

These are Chatito-owned executor contracts. One per chain, shared. Grants are per strategy. Do not send tokens to these addresses.

EVM chains use Permit2 + the Executor. Solana uses the same product (cap, expiry, revoke, 100% back to you) with a native spend-grant program and Jupiter. It is not an EVM clone.

Machine facts and deploy hashes: chatito.ai/executor.md.

A listed contract is not a claim that Live or Sign is open for every account on that chain. Trust the app.

What You Control

One grant per strategy. Revoking book A does not kill book B. 6.1m holds spend + exit in that one grant. 6.1a holds spend + inventory of bags it bought.

DEX practice is open in the app. Trust the app, not this page, for whether Live is on. DEX Live and new executor Signs stay closed to the public until a third-party audit.

What This Is Not

• Not a place to send tokens
• Not a seed-phrase product
• Not a promise of profit
• Not "set and forget forever" without your revoke and Live switch
• Not a claim that DEX Live is open for every account today

Related

• Smart Policy
• Wallets
• Automation Levels
• Custody and Keys
• LP Executor
• Safety and Access
• Security
• Strategies and Paper
• Trading Engines
• Machine facts: chatito.ai/executor.md
• Reference