A private trading layer for AI agents
Your agent trades.
Nobody watches.
Crypto and tokenized stocks in one vault, traded through NEAR Intents' confidential layer, by an engine that runs in an enclave you can check yourself. Your agent gets rules and a token. It never gets the keys.
Private at every layer
Four places a strategy usually leaks, and what Norr does at each.
-
Thinking
Run your agent's model inside a NEAR AI Cloud enclave. Norr's reference agent checks the hardware-backed signature on every response it uses, so "private model" is verified, not assumed.
-
Trades
Swaps settle in the confidential layer of NEAR Intents whenever the vault holds its funds there. Pair, size and price stay off the public chain.
-
Engine
The Norr service runs in an Intel TDX enclave on Phala. Its configuration and the exact container images it booted are measured and public.
-
Record
The agent's stated reasoning is sealed to a key derived from your wallet. The service can write it but cannot read it back; only you can open it.
Proof, not promises
Anyone can ask the running service to prove what it is. The dashboard's Verify screen runs these checks in your browser, with a fresh random nonce each time.
- The quote is a genuine Intel TDX quote, verified through Phala's service
- It was made for your request, not replayed
- The configuration matches what the hardware measured
- The boot event log reproduces the hardware's register
- The VM runs a production OS image, not a debug one
- Every container image is pinned by digest
Attestation shows which code and images the machine booted. It does not show what secrets it was given, and Phala's key service is a trust assumption we name below.
Your agent never holds the keys
The agent holds one token, scoped to one vault. The funds sit in an OutLayer custody wallet whose limits you set.
- Rules you set
- Largest trade, daily spend cap, daily loss cap, allowed assets, cooldown. Enforced before every trade.
- Scam Shield
- Unknown or thin tokens are scored on liquidity and age and blocked when high risk. A live Shield incident feed can stop an asset outright.
- Kill switch
- One tap pauses every vault. The next request the agent makes is refused.
- No way out for the agent
- It cannot withdraw, change the rules, or choose a destination. Withdrawals go only to your address and need your approval.
Stocks and crypto, one private vault, from $5
Ask for a ticker. Norr finds every routable version and takes the best quote. Tokenized stocks trade around the clock; small orders on liquid names start at about $5.
- Crypto across chains, and tokenized US stocks and ETFs (Ondo)
- Fund from any chain NEAR Intents supports
- Every swap carries a minimum output and is checked after it runs
- Tokenized stocks are not available to US persons; you confirm your status when you set the rules
What we don't hide
Private from the public is not the same as private from everyone. The honest list:
- Funding is public. Depositing to the vault, and shielding funds into the confidential layer, show on public chains.
- Your custody provider sees every operation. OutLayer builds and signs each swap. NEAR Intents' operator and solvers can read confidential intents.
- Norr sees decisions. The service reads trades to enforce your caps, and the agent can read its own activity. Only the agent's reasoning is sealed to you.
- Confidential swaps have no independent audit trail. We check them against balances and the provider's own report, and say so on every result.
- Trust assumptions. OutLayer's gateway builds swap routes, Phala's key service holds the enclave's keys, and traffic from Norr is identifiable as Norr.
Built on
- NEAR Intents
- Confidential Intents
- NEAR AI Cloud
- OutLayer
- Phala
Where this stands
Built for the NEAR hackathon, November 2026. Real mainnet trades have run with small balances, including a confidential round trip in a tokenized stock. Each swap currently waits for the owner's approval in the custody dashboard. Limit orders are not supported. This is a hackathon build, not audited software: do not put in money you cannot lose.