sra-riskgate

Deterministic pre-filter for stablecoin transactions. It runs fast rule checks (peg-deviation bounds in both directions, a single-transfer ceiling, and payload validation) before you send a transaction to the SRA-RiskGate-4B model.

This package does not run the model and does not perform sanctions screening.

pip install sra-riskgate

from sra_riskgate import RulePreFilter, TransactionPayload

gate = RulePreFilter(max_amount=50_000, depeg_hold_pct=1.0, depeg_reject_pct=5.0)
verdict = gate.inspect(TransactionPayload(
    chain_id=1, token="USDC",
    sender="0x" + "a" * 40, recipient="0x" + "b" * 40,
    amount=5000.0, peg_deviation_pct=-1.5,
))
print(verdict.decision.value, verdict.flags, verdict.required_actions)
# hold ['MODERATE_DEPEG'] ['manual_review']

Changelog

0.3.5: AgentKit integration rewritten: real ActionProvider with @create_action; sends USDC as an ERC-20 transfer (0.3.3 sent ETH; 0.3.4 was not accepted by AgentKit); chain read from the wallet; reverted transactions reported as failures; optional peg_feed; solana pinned so the [agentkit] extra imports.

0.3.1: Unknown constructor arguments now raise TypeError instead of being silently ignored. Legacy max_allowed_deviation_pct maps to the hold threshold again (as in 0.1.x). Non-finite thresholds are rejected. License and author metadata restored.

0.3.0: Depeg checks use abs() (catches upward depegs). Thresholds validated.

License: Apache-2.0

Coinbase AgentKit integration

pip install "sra-riskgate[agentkit]"

from coinbase_agentkit import AgentKit, AgentKitConfig, CdpEvmWalletProvider, CdpEvmWalletProviderConfig
from sra_riskgate.integrations.agentkit import RiskGateActionProvider

wallet = CdpEvmWalletProvider(CdpEvmWalletProviderConfig(network_id="base-sepolia"))
agentkit = AgentKit(AgentKitConfig(
    wallet_provider=wallet,
    # Register ONLY the risk-gated provider for payments. Adding AgentKit's
    # wallet or ERC-20 providers gives the agent ungated transfer actions.
    action_providers=[RiskGateActionProvider(max_amount=1000.0, peg_feed=my_usdc_peg_feed)],
))

The agent gets one action, risk_gated_usdc_transfer. It sends USDC (ERC-20, never the native token) on Ethereum, Base, and Base Sepolia, and only after the pre-filter approves. Depeg checks need a peg_feed(chain_id) -> deviation %; without one they're reported as disabled. A reverted transaction is reported as FAILED, never as sent.