aomiExecution Infrastructure wallets · retail fintech · embedded-wallet providers
Chat-to-trade · white-label · non-custodial

Chat-to-trade is on every roadmap.
The safety layer is why it slips.

aomi is that layer, already built. Your users type plain English; the runtime builds the exact transaction and rehearses it on a live copy of the chain before anything is signed. The user signs the way they always have, and keys never move. It sits above your existing signer — one integration, not a platform program.

Self-custody wallets Retail fintech & trading apps Embedded-wallet providers Exchange consumer apps
concept · white-label — any wallet's brand
Acme Wallet 0x7f4e…a3c2 mainnet
AssetsActivityChat
Swap 2,400 USDC to ETH — best route, max 0.5% slippage
✓quote · aggregator0.7431 ETH · best fill
✓route check1 hop · v4 pool
building transaction · simulate-before-sign
→ approve · USDC → router
→ swap · 2,400 USDC → ETH
→ receive · 0.7431 ETH · slippage ≤ 0.5%
batched → 1 signature · SIMULATED on forked live state ✓
Approve & Sign native surface · keys stay with the wallet
00 The product, running

Four sentences a user would type —
and everything it takes to honour them.

Unedited screen captures of the runtime your product would embed. No amounts, no contract addresses, no bridge named: the user says what they want, and the surface works out the rest — then asks the wallet to sign exactly what it proved.

"Move most of my ETH over to Base — leave me enough on mainnet for gas." bridge · Across · keeps a gas buffer the user never specified · 2:20
"Now stake the rest with Marinade." swap settles, then a follow-up instruction in the same thread · Solana · 1:06
"Move my entire mSOL position over to JitoSOL." route Jupiter · price impact ~0% · simulation passed → staged for approval · 0:41
"Yes — do the whole sequence." Lido · Aave · erc20 · persisted as a recurring intent · 0:51
no audio · every clip ends at a signature the user's own wallet approves — keys never move
01 The blocker — and what's already built

The chat UI is a sprint.
The safety layer is the year.

Nobody needs convincing on the surface itself — Coinbase put agents in the Base app, OKX shipped an agentic wallet, Kraken is rebuilding its consumer app around them, Robinhood extended agentic trading to crypto, MetaMask shipped a developer-facing agent wallet. Users already push billions through plain text boxes. What slips the roadmap item is everything underneath the chat UI.

/01 · the published bar

Simulation, threat scanning, spend caps, protocol allowlists, insured signing — the checklist the first movers set is now the minimum. Ship less and the security review vetoes it; ship it all and it's a platform program.

/02 · the build underneath

Forked-state simulation infrastructure, a policy engine, multi-chain broadcast across EVM + SVM, model evals — 12–18 months of work competing with everything else on the roadmap.

/03 · the blast radius

One hallucinated transaction or one injection headline retires the feature. Chat input is a new, drainer-shaped attack surface — language must never be able to cause an unverified state change.

~200ms
fresh fork of live chain state per simulation — runtime built directly on a full node
100%
of proposed transactions simulated against forked live state before signature
0
keys touched — the harness sits above the existing signer; custody never changes
1 sprint
to embed — a drop-in React widget, or headless hooks under a fully custom UI

"Most 'AI wallets' listed in 2025 either no longer function, have quietly shut down, or have no meaningful AI features beyond a chat interface."

— independent review of consumer AI wallets, 2025 · the chat UI was never the hard part; the execution-safety layer is
"The model can describe an outcome —
it can never cause an unverified one."
language proposes · the fork proves · the user's own key signs · policy bounds every step
02 How it works — the integration
REFERENCE DEPLOYMENT IN PRODUCTION

A surface, not a platform project.

Integration model
aomi plugs in strictly above your key layer. It talks to the signer you already run — an in-house adapter, Para, or wagmi connectors — and hands back exact transactions for your existing signing flow to approve. Key material never moves.
Surface
100% native brand. An embeddable chat surface plus SDK — in-app page, web widget, or messaging channels — with no vendor mark in the product.
Proof
The runtime is in production today — Somm Finance, a DeFi vault product, ships its conversational transaction surface on aomi, with app-level fees priced and settled onchain. Same rails, different brand on top.
01 · the signer stays where it is
Existing signer · unchanged KEYS TOUCHED: 0
In-house adapter Para wagmi connectors EIP-4337 · 7702
the harness consumes the signer interface — custody and trust model unchanged
No custody conversation. Integration works atop the signing stack already in production.
02 · intent → exact transaction
"Swap 2,400 USDC to ETH, best route, max 0.5% slippage"
building transaction · aomi core pipeline
→ route · aggregator · best fill
→ approve + swap · batched
1 signature · SIMULATED against forked live state ✓
the quoted outcome is the proven outcome — slippage, balance, and route verified pre-signature
No blind signing. The user approves a simulated result, not a hex blob.
03 · the policy, enforced
spend_cap   = $2,000 / day
venues     = allowlist(dex, perps)
approvals  = human-sync · per tx
revoke     = instant · kill switch
spend capsvenue allowlistsinstant revoke
Configuration, not promises. An out-of-policy proposal stops before signature — by construction.
04 · every surface, one integration
In-app chat page iOS · Android SDK Telegram Discord … web widget · next
Built once, rendered natively everywhere the product lives — no vendor mark, no separate app competing for the user.
05 · the embed · aomi.dev/docs
assistant.tsx
import { AomiFrame } from "@aomi-labs/widget-lib";

// the full chat surface, above the existing signer —
// wallet actions ride the simulate-before-sign pipeline
export function Assistant() {
  return <AomiFrame height="640px" width="100%" />;
}
→ headless instead: @aomi-labs/react — hooks only, fully custom UI
→ signing: EIP-4337 + EIP-7702 · Alchemy / Pimlico · automatic fallback
→ signer: Para · wagmi connectors · bring-your-own adapter — keys never move
→ MIT-licensed SDK · one session model across widget, hooks, and CLI

The rails are not a concept. The same runtime runs in production today — Somm Finance ships a conversational transaction surface on aomi, with app-level fees priced and settled onchain. The wallet surface above is that runtime, white-labeled.

in production · announced on @aomi_labs
03 Capability breakdown

The capability set, in detail.

The architecture, the pipeline it enforces, the controls around it, and the terms. Nothing here is bolted on — each is a property of a runtime built directly on a full node that forks every chain in ~200ms, EVM + SVM.

3.1

System architecture

one harness · every chain, forked
Build
tool composes the exact tx
Simulate
prove the real outcome is safe
forked state · ~200ms
Sign
the user approves exact changes
AA bundler · their wallet
Broadcast
confirmed onchain
AA + Solana Jito
🧑 🧑 🧑 ···· 🧑 User-specific
context
↕ ↕ ↕ ↕
Stateless Dispatch
Application
[app1, app2, ..].start()
Runtime
Scheduler.run()
🤖 🤖 🤖
Memory & IPC
Tool Scheduler
LLM Interface
evm-
gateway
db-driver
web-search
gpt5
Opus4.5
kimi-k2
Arb
Base
OP
Mainnet
solana
Forks Infrastructure
Full
Node
application-define forks ~200ms
The pipeline on the left is the contract every chat-initiated action passes through. The runtime on the right is what the product team does not build: stateless dispatch, per-user agent threads, tool + model scheduling, and a fork of every chain served from a full node. Language in, verified execution out.
Multi-threaded async execution
Agent threads run server-side, so work continues after the app is closed — background strategies, limit / stop orders, copy-trading a target wallet, scheduled DCA and rebalances, and liquidation guards that fire on their own. Surface area a swap screen cannot express.
Access control
Provider-native key delegation — Para, wagmi connectors, or an in-house adapter — with machine auth solved: an agent signs only under a scoped, revocable policy (value caps, human-sync or autonomous). Keys never leave the user's own wallet.
3.2

Execution pipeline

build · simulate · sign · broadcast
Step 01

Build

Intent parses into the exact transaction — routed through the aggregators already integrated, batched into a single operation.

intent → exact tx
Step 02

Simulate

Executed against forked, live chain state to prove the real outcome — fill, slippage, balance changes — before anything is signed.

forked state · ~200ms
Step 03

Sign

Signed by the user's own wallet through the product's existing signer — per-transaction approval, or scoped delegation within caps.

existing signer · unchanged
Step 04

Broadcast

Confirmed onchain with account abstraction and Solana Jito built in — no execution infrastructure for the product team to run.

AA + Solana Jito
Quote = outcome. What the surface displays is what the chain settles — the property that makes chat over irreversible transactions shippable.
3.3

Control framework

the policy, enforced
Policy as configuration

Spend caps, venue allowlists, per-session limits, per-wallet rules — defined by the product, enforced on every action. Per-transaction human approval by default; scoped delegation where the product allows it.

spend capsallowlistssession limits
Kill switch & injection defense

Chat input is untrusted by design: language can only propose; the pipeline verifies. A failed simulation or out-of-policy proposal stops before signature. Halt an agent instantly, revoke a grant instantly.

instant haltinstant revoke
Custody model

Non-custodial by construction. The harness consumes the existing signer interface — an in-house adapter, Para, or wagmi connectors — and key material never moves. The self-custody story the product sells stays exactly true.

keys never movesigner-agnostic
Oversight & audit

Per-app telemetry on every turn; each executed transaction traceable to the user intent that authorized it. Execution-only by construction — no recommendations, no discretion — with logs built for compliance review.

full audit trailexecution-only

The invariant: aomi can compose and simulate any transaction, but can only ever propose it. Authority to move value remains with the user's key and the product's policy — the property that keeps a conversational surface on the tooling side of the advice line.

3.4

Commercial terms

builder-code convention

The economics follow the convention wallets already accept for embedded execution: the product keeps its take rate; the platform earns a share of incremental executed flow. A conversational surface converts passive balances into transaction volume the current interface never captures — growth in volume per MAU, on the existing fee.

Yours
The take rate
the product's swap / perps fee stays the product's
bps
Platform share
on incremental executed flow — settles only when flow settles
+10%
Managed model
applies only without a bring-your-own model key
Custom
Per integration
white-label SDK & enterprise terms scoped per engagement
aomi

The incumbents built the surface in-house.
The integration is how everyone else ships it.

A native-brand conversational trading surface, above the existing signer, gated by simulation and policy — a sprint to embed, not a platform program.

Read the integration docs →
aomi.dev · execution infrastructure for agentic finance