Booting simulation engine…
Pre-Execution Security Oracle — Built on Sui
AEGIS is a pre-execution simulation oracle for Sui. Every transaction is dry-run against live chain state, risk-scored, and explained in plain language before your users ever sign — with gas sponsored, so they never need SUI to stay safe. No custody. No admin keys. No postmortems.
01 — The Pre-Mortem
The pitch-deck version — an AI that watches the chain and autonomously pauses contracts — dies six months after launch. Here is the autopsy of why intervening AI cannot work on Sui, and why that failure is exactly our edge.
Sui has no waiting room. Owned-object transactions bypass consensus and finalize in ~400ms; even shared-object DeFi flows settle sub-second. An off-chain AI watching “the mempool” is racing a chain that already finished. The hack is over before the HTTP request routes.
An AI that can pause contracts or move funds needs a privileged Admin Capability — a centralized kill switch wearing a security badge. One prompt-injection payload hidden in on-chain metadata, or one hallucinated “attack” on a high-volume day, and your guard becomes the exploit.
Every Sui asset is a distinct cryptographic object with its own lineage — not a row in a balances table. Real-time indexing of millions of dynamic objects into an LLM context window means runaway cloud spend and latency that kills the product before the market does.
02 — The Pivot
So we don't intervene. We don't race consensus, and we never hold a key. We move the battlefield to the only place the attacker can't win — the moment before the signature.
Move is deterministic. That means any Programmable Transaction Block can be perfectly simulated against live chain state — and its exact outcome known — before a single byte is committed. AEGIS turns that property into a security layer the chain itself cannot offer.
03 — The Pipeline
Scroll to advance ↓
One call from the dApp — aegis.analyze(tx) — hands the pending Programmable Transaction Block to the AEGIS extension. It is inspected while still unsigned, before the wallet is ever asked to open.
> ptb.captured sender: 0x7af3…c21e commands: 4 gas_budget: 0.05 SUI status: UNSIGNED
Because Move is fully deterministic, we dry-run the PTB against current chain state in a sandboxed executor. The exact post-state is computed — not predicted.
> aegis.dry_run(ptb) objects_read: 17 objects_mutated: 5 objects_transferred: 3 determinism: EXACT
The agent reads the object delta, resolves every Move call against a registry of known Sui protocols, and compares the shape against attack patterns it has seen before. Out comes a risk score, the flags behind it, and the reasoning.
> model.inspect(delta) pattern: OWNERSHIP_FLIP target: Kiosk<0x94aa…> drain_vector: DETECTED confidence: 0.997
AEGIS renders the outcome in plain language and returns one of three verdicts: approve, caution, reject. On approve the transaction executes with gas sponsored, so the user never needed SUI to begin with. No custody, no admin keys, no race against consensus.
AEGIS SECURITY ALERT
Pre-signature verdict
This transaction will transfer 3 objects you own — including your Kiosk — to an unverified address. Simulated outcome: wallet drained.
04 — The Moat
AEGIS never holds funds, private keys, or Admin Capabilities. There is nothing to steal, nothing to inject into, and no kill switch to abuse.
Dry-runs compute the exact post-state of any PTB against live chain data. Verdicts are grounded in execution results — not guesses about intent.
Every Move call is resolved against a registry of Sui protocols carrying audit status and risk rating. A call into an unverified package gets named as one, not silently trusted.
Import one object, call one method, branch on the result. aegis.analyze() never throws — every outcome, including “not installed”, comes back as a status you can handle.
A false positive is a dismissible warning — not a frozen protocol. The failure mode of AEGIS is friction; the failure mode of intervening AI is catastrophe.
zkLogin sign-in plus Enoki-sponsored gas means a user with no wallet and no SUI can transact — and still sees the verdict before they sign. Onboarding without a funding step.