aomiExecution Infrastructure vaults · funds · treasuries
Execution infrastructure · onchain asset management

Every vault. Every chain.
One execution harness.

A manager already owns the hard part — the strategy. aomi runs everything between a decision and its settlement. Your existing logic becomes an agent that executes on every venue and chain, rehearses each transaction on a live copy of the chain before signature, and operates inside a mandate that is enforced, not promised. Keys stay with you the whole time.

IN PRODUCTION · SOMM FINANCE how it was built ↓
Vault products & risk curators Crypto-native funds DAO & protocol treasuries RWA / tokenized-fund operations
Sommelier Idle USDC, working on Base · powered by aomi 0xa73…F5
You approve every move. The agent never signs on its own.
Put the idle USDC to work — best net yield, band A only
✓scanning venues6 markets · 3 chains
✓mandate checkaave v3 · band A
building transaction · aomi core pipeline
→ approve · USDC → aave v3 pool
→ supply · 120,000 USDC · Base
batched → 1 signature · SIMULATED on forked live state ✓
Review deposit → Aave v3 the agent proposes · you sign · keys never move
Venues · net yield1 open · 5 tracked
Aave v3open
USDC · Base
3.37%net apy
30d avg3.21%
tvl$24.1M
risk bandA
Sky Lendingpost-v1
USDS · Ethereum
6.12%net apy
30d avg5.88%
tvl$1.42B
risk bandA
Morphopost-v1
USDe · Base
4.47%net apy
30d avg4.62%
tvl$86.3M
risk bandB
Sky Lendingpost-v1
sUSDS · Ethereum
3.52%net apy
30d avg3.50%
tvl$2.10B
risk bandA
Compound v3post-v1
USDC · Ethereum
3.30%net apy
30d avg3.14%
tvl$412M
risk bandA
Compound v3post-v1
USDT · Ethereum
3.24%net apy
30d avg3.09%
tvl$198M
risk bandA
rates refreshed each cycle · only band A with deposits open is eligible today
00 The product, running

One instruction. The whole sequence,
simulated, signed and scheduled.

Unedited screen captures of the execution layer a mandate would run on: cross-chain moves with a gas reserve, position rotations staged after simulation, and a multi-step sequence persisted to run on a cadence — so the mandate keeps executing after the desk closes.

"Move most of my ETH over to Base — leave me enough on mainnet for gas." bridge · Across · keeps a gas buffer the user never specified · 2:20
"Now stake the rest with Marinade." swap settles, then a follow-up instruction in the same thread · Solana · 1:06
"Move my entire mSOL position over to JitoSOL." route Jupiter · price impact ~0% · simulation passed → staged for approval · 0:41
"Yes — do the whole sequence." Lido · Aave · erc20 · persisted as a recurring intent · 0:51
no audio · every step is proposed, simulated, and signed by the mandate holder's own wallet
01 The operating problem — and the result

Managers hold the strategy.
The execution stack holds them back.

An active manager already owns the difficult part — the models, the data, the risk framework, the endpoints a desk operates every day. What consumes the desk is everything between a decision and its settlement.

/01 · integration burden

Each protocol requires custom code, dashboards, and monitoring — rebuilt per venue, per chain, and maintained through every upgrade and hardfork.

/02 · operational coverage

Markets run 24/7; operations teams do not. Rebalances, approvals, and liquidation guards depend on someone being awake — and headcount is the entire margin.

/03 · verifiability

Post-Stream, depositors and allocators require proof that a vault does only what its policy permits — opaque discretionary execution is now a liability.

9 mo → days
integration work replaced per venue — no execution stack to build or maintain
100%
of transactions simulated against forked live state before signature
0
keys held by the platform — signing authority never transfers
1
harness across every venue and chain, EVM + SVM

"Managing a single vault across multiple platforms means rebuilding everything from scratch — much like opening separate bank accounts with no shared infrastructure."

— DeFi Curators in 2025 · industry report, Chorus One
"The policy is the permission — not a promise."
every action an agent takes is bounded by an enforced, revocable, onchain-verifiable mandate
02 How it works — the Somm engagement
IN PRODUCTION · SOMM FINANCE

From managed vault to
agent-operated product.

Situation
Somm Finance, an actively managed liquidity vault: five operating endpoints, a defined risk mandate, execution and depositor access limited to one surface and manual operations.
Approach
The endpoints Somm already operated wrap into tools; the investment mandate becomes an enforced prompt; the composed agent deploys into the hosted runtime. No net-new engineering.
Outcome
One agent executes the vault's operations and faces depositors on every surface — with app-level fees priced and settled on-rails, a revenue line that did not previously exist.
01 · the endpoints Somm already operated
Somm
GET /idle-assets
GET /risk-snapshot
POST /assess-position
GET /credit-balance
POST /propose-intent
The strategy stays with the manager. Five endpoints — the models, data, and risk framework Somm already ran.
02 · tools + mandate = an aomi app
mandate · enforced as configuration

Manage idle treasury assets for Somm. Seek best net yield. Never exceed risk band B. Always propose before execution.

get_idle_assets()assess_position()propose_intent()
↓ compose
aomi app
Somm Liquidity Manager
No net-new engineering. Endpoints wrap into tools; the mandate becomes enforced configuration.
03 · deployed in the hosted runtime
aomi · Hosted Runtime KEYS HELD: 0
kuroko
orca
somm liq. mgr
aomi core · build → simulate → commit → batch ▸ blockchain client
Native to the chain. One pipeline, every chain forked ~200ms, zero keys held.
04 · one runtime, every surface
Somm Frontend Telegram Bot Discord Slack … iOS · web · next
The agent that runs the vault's operations also faces its depositors — natural language on every surface, built once.
05 · the same runtime, operating the vault
somm.finance
Somm Assistant · powered by aomi
Rebalance my liquidity from EtherFi to Morpho
✓querying positions2,400 weETH · etherfi
✓risk checkmorpho band A · +1.9%
building transaction · aomi core pipeline
→ withdraw · etherfi · 2,400 weETH
→ approve · weETH → morpho blue
→ supply · morpho @ 91.2% util
batched → 1 signature · SIMULATED ✓
Approve & Sign runs on aomi · keys remain with the signer
Somm aomi
The agentic era for Somm — in production.Somm Finance · powered by aomi.dev
● app-level fees · live on aomi rails ● x402 pricing · onchain settlement ● announced on @aomi_labs
03 Capability breakdown

The capability set, in detail.

The architecture, the pipeline it enforces, the controls and posture around it, and the terms. Nothing here is bolted on — each is a property of the runtime, built directly on a full node that forks every chain in ~200ms.

3.1

System architecture

one harness · every chain, forked
Build
tool composes the exact tx
Simulate
prove the real outcome is safe
forked state · ~200ms
Sign
the holder approves exact changes
AA bundler · own wallet
Broadcast
confirmed onchain
AA + Solana Jito
🧑 🧑 🧑 ···· 🧑 User-specific
context
↕ ↕ ↕ ↕
Stateless Dispatch
Application
[app1, app2, ..].start()
Runtime
Scheduler.run()
🤖 🤖 🤖
Memory & IPC
Tool Scheduler
LLM Interface
evm-
gateway
db-driver
web-search
gpt5
Opus4.5
kimi-k2
Arb
Base
OP
Mainnet
solana
Forks Infrastructure
Full
Node
application-define forks ~200ms
The pipeline on the left is the contract every agent action passes through. The runtime on the right is what a desk does not build: stateless dispatch, per-mandate agent threads, tool + model scheduling, and a fork of every chain served from a full node. Strategy in, settled position out.
Multi-threaded async execution
Agent threads run server-side, so a mandate keeps executing after the desk closes — background strategies, limit / stop orders, copy-trading a target wallet, scheduled DCA and rebalances, and liquidation guards that fire on their own.
Access control
Provider-native key delegation — Privy · Para compatible — with machine auth solved: an agent signs only under a scoped, revocable policy (value caps, human-sync or autonomous). Keys never leave the mandate holder's own wallet.
3.2

Execution pipeline

build · simulate · sign · broadcast
Step 01

Build

The agent composes the exact transaction from strategy logic or an intent — batched into a single operation.

intent → exact tx
Step 02

Simulate

Executed against forked, live chain state to prove the real outcome — slippage, balances, risk — before signature.

forked state · ~200ms
Step 03

Sign

Signed by the mandate holder's own wallet under scoped delegation — human-approved or autonomous within caps.

AA bundler · signer's wallet
Step 04

Broadcast

Confirmed onchain with account abstraction and Solana Jito built in — no separate infrastructure to run.

AA + Solana Jito
Best execution that can be evidenced — every fill traceable to a pre-trade simulation and an enforced policy check.
3.3

Control framework

the mandate, enforced
Mandate as configuration

Value caps, allow-listed venues, risk bands, per-wallet rules — defined once, enforced on every action. Human-sync approval or autonomous execution within caps.

value capsallowlistsrisk bands
Kill switch & revocation

Delegation is data, not a handover: halt an agent instantly, revoke a grant instantly. A failed simulation or an out-of-policy proposal stops before signature — by construction.

instant haltinstant revoke
Custody model

Non-custodial by construction. Agents sign through provider-native scoped delegation — Privy & Para compatible — and signing authority never transfers. The runtime's counter reads KEYS HELD: 0, always.

keys never movePrivy · Para
Oversight & reporting

Per-app telemetry on every turn; each action traceable to its originating intent. An audit trail consumable by fund administration, auditors, and allocator due diligence.

full audit trailODD-ready

The invariant: aomi can compose and simulate any transaction, but can only ever propose it. Authority to move value remains with the mandate holder's wallet and policy — including for strategies that run unattended.

3.4

Security & compliance posture

published transparently
Custody architecture Live today Non-custodial by construction — zero keys held, signing authority never transfers, delegation revocable at any time.
Pre-trade simulation & policy checks Live today Every transaction simulated against forked live state and checked against the mandate before signature.
Signing integrations · Privy, Para Live today Provider-native scoped delegation through the wallet infrastructure a desk already operates.
Safe (multisig) integration Roadmap Execution under Safe-based policy for treasuries and mandates operating on multisig today.
Independent security audits In preparation Third-party review of the runtime and delegation layer; reports to be published on completion.
SOC 2 Type II In preparation Controls program underway toward independent attestation.
Current status of every item above is stated as-is and kept current in the due-diligence pack — no certification is claimed before it is held.
3.5

Commercial terms

aligned with executed flow

Pricing follows the market's own convention — basis points on executed flow, not seat licenses. Rates are transparent and visible per application; the same rails allow an application to price and settle a fee of its own, as Somm does. Costs scale with results, and the platform earns only when flow actually settles.

10bps
Outcome fee
on realized flow, settled onchain
30%
Outcome take
platform share of that outcome fee
+10%
Managed model
applies only without a bring-your-own model key
Custom
Per mandate
hosting & enterprise terms scoped per engagement
aomi

Bring a mandate onchain — the way Somm did.

Existing strategy logic, existing keys, an enforced policy — running as an agent that executes, reports, and settles fees on every chain.

Request the due-diligence pack →
aomi.dev · execution infrastructure for agentic finance