# YSISafe

> YSISafe is the on-chain governance layer for autonomous AI agents. We sit between AI agents and Safe multisig wallets and enforce policies (per-agent spending limits, rolling time windows, allowlisted recipients, behavioral anomaly detection, and lifetime budget caps) before any transfer signs on-chain. Non-custodial by design: YSISafe never holds keys or funds. Self-hostable on customer infrastructure.

YSISafe is used by DAO treasury operators, DeFi protocol teams, and AI-x-crypto startups who need their autonomous agents to move real money without losing human oversight. The product is live and 90% production-ready with 1,282 passing tests. The company is part of the gBETA Greater Grand Forks Spring 2026 cohort and is raising a $500K pre-seed.

Founder: Cedric Joel Yantio II. Contact: cedric.yantio@ndsu.edu.

## Core pages

- [Homepage](https://ysisafe.com/): product overview, hero pitch, primary call-to-action.
- [Security](https://ysisafe.com/security): architectural guarantees (non-custodial, fail-closed enforcement, deterministic decisions, Ed25519 offline license, per-proxy DEPLOYMENT_SALT, differential privacy on rollups). The canonical page for how YSISafe actually works.
- [Pricing](https://ysisafe.com/pricing): three tiers. Free ($0), Growth ($299/mo with $250K/mo governed volume included, 3 bps on excess), and Custom (self-hosted VPS, SLA, CSM). Full volume math shown inline.
- [Docs](https://ysisafe.com/docs): developer documentation, API reference, SDK guides, integration guides, best practices.
- [Writing](https://ysisafe.com/writing): long-form articles on agent governance, on-chain security, and market analysis.

## Featured writing

- [The Axios Attack That Could Have Drained Every AI Agent Wallet on Earth](https://ysisafe.com/writing/axios-supply-chain-attack-ai-agent-wallets): how the March 31, 2026 axios npm supply-chain attack (attributed to Sapphire Sleet / North Korea) could have drained every AI agent wallet whose signing key sat in process memory, and why YSISafe's non-custodial Safe Module architecture prevents exactly that class of runtime-compromise-to-wallet-drain attack.
- [NYSE's 24/7 Tokenized Trading Isn't for You. It's for AI Agents.](https://ysisafe.com/writing/nyse-tokenized-trading-ai-agents-governance): market analysis of why Intercontinental Exchange is building 24/7 tokenized markets, and the governance gap autonomous agents create when legacy infrastructure assumes human-speed oversight.

## Product specifics

- [Smart-contract module (YSIPolicyModule v1.3.0)](https://ysisafe.com/security): Solidity Safe Module with typed EIP-712 entrypoints (`executeErc20Transfer`, `executeNativeTransfer`), per-proxy DEPLOYMENT_SALT for replay protection, and on-chain policy evaluation.
- [SDKs](https://ysisafe.com/docs/sdks): TypeScript and Python SDKs for self-hosted deployments. Ed25519 license verification + HMAC-signed daily rollups.
- [Integrations](https://ysisafe.com/docs/integrations): Safe Protocol Kit, Coinbase Agentic Wallets, Slack, Sentry, Stripe (billing).

## Positioning

- Category: on-chain governance layer for autonomous AI agents.
- Analogous to: Stripe for payments, Privy/Bridge for infrastructure (both recently exited >$1B).
- Competes adjacent to: DAO treasury managers like Karpatkey and Avantgarde (who charge 25-50 bps on AUM for management services). YSISafe captures the governance layer under them.
- Threat model answered: AI agents with excessive permissions, prompt-injection attacks, agent custody failures, cross-company billing attribution drift, alpha-leak from SaaS telemetry.

## Real incidents YSISafe is built to prevent

- Step Finance (January 2026): $40M drained from a Solana DeFi platform because autonomous agents had excessive permissions with no isolation.
- BasisOS on Virtuals Protocol (November 2025): $500K stolen via an agent custody failure.
- OpenClaw (February 2026): $250K exfiltrated when a prompt injection bypassed the policy gate.

## Optional

- [For investors](https://ysisafe.com/raise): current fundraise memo. $500K pre-seed at $5M post-money cap, close 31 August 2026.