Smart Policy
Smart Policy is Chatito's name for how on-chain automation should work.
You keep the wallet. You keep the tokens. You keep the NFT. You sign a capped, expiring rule. The system may then act only inside that rule, and only send results back to you.
That is not a vault. That is not "send funds to a contract." That is self-custody plus policy.
We use this word on purpose. Most "set it running" DeFi still asks you to deposit into a smart contract and trust the box. Chatito refuses that model. Users should interact with smart policies, not hand over custody.
The Definition (Ours)
A Smart Policy is a signed on-chain rule with all of these properties:
| Property | Meaning |
|---|---|
| You stay the custodian | Balances and position NFTs never leave your wallet to "sit" in Chatito. |
| Capped | The policy may pull only what you granted. Not the rest of the wallet. |
| Expiring | After the time you set, the policy is dead. |
| Revocable | You can stop it now. Remaining goes to zero. |
| Recipient-locked | Output, leftovers, and any new NFT can go only to the wallet that signed. |
| Atomic | One transaction: act, then return. Revert means nothing left behind. |
| Not Live | Signing a policy does not arm a strategy. Live is a separate human switch. |
If a product takes your deposit, holds the NFT, or needs an unlimited approve, it is not a Smart Policy. Call it what it is: custody.
Why Not "Smart Contract"
Smart contracts are how chains run code. They are not a product promise.
A vault is a smart contract. A malicious approve target is a smart contract. An upgradeable proxy that can change the rules later is a smart contract.
Smart Policy is the product primitive: the rule you signed, the cap you set, the assets that never left you. The chain enforces that rule. You do not send the bag in first.
We will keep saying Smart Policy in product copy. Engineers may still say "thin passthrough" in code. Users should never be told to "deposit into the contract."
What You Sign
Once per strategy you open a spend grant (the instance of the policy):
- Exact allowance for the token (or pair). Never unlimited.
- Open the grant: cap, expiry, allowed actions.
- Tokens stay in your wallet.
After that, a Chatito keeper may call only the actions the grant allows, on allowlisted venues, and only to your address.
You revoke, or you wait. Then the bot cannot spend.
Revoke is not the Live switch. If the strategy was already Live, it stays Live. The book falls back to manual Sign (you Sign each action). The keeper cannot spend after revoke.
Chains
Executor contracts exist on Base, BNB Smart Chain, Arbitrum, and Ethereum. Addresses live on the DEX Executor and LP Executor pages (and the machine files on chatito.ai). Solana is not public as deployed.
A contract on a chain is not a promise that your account can Sign a policy on that chain today. Trust the app.
Shipped Policies
| Policy | Job | Page |
|---|---|---|
| DEX Executor | Swaps. Pull, route, return 100% to you. | DEX Executor |
| LP Executor | Mint, collect, rebalance, close. Tokens and the position NFT stay yours. | LP Executor |
These are two Smart Policies. Different jobs. Same custody thesis. Do not send tokens or NFTs to either address.
How This Fits The Rest Of Chatito
| Surface | Custody story |
|---|---|
| CEX | Trade-only exchange API keys. Balances stay on the exchange, under your account. |
| Propose and Sign (LP default) | You sign every mint / collect / rebalance / close yourself. No grant required. |
| Smart Policy | You sign the rule once. The keeper may act only inside it. |
| Agents | Paper and read. Never live. Never a Smart Policy they can open, revoke, or arm for you. |
CEX keys and Smart Policies are cousins: limited remote control, not the vault door.
What This Is Not
- Not a place to send tokens
- Not a Chatito deposit wallet
- Not unlimited approve
- Not a seed-phrase product
- Not a promise that Live is open for every account
- Not "the smart contract holds your money"
Related
Ready to run a strategy?
Open App