Implemented
USDCUSDC budgets, payment amounts, receipts, proof records and operator dashboards.
Grant review package
Kestrel is a production control plane for agentic money movement.
This page gives reviewers one clean path through the product: run the agentic workflow, inspect the proof, confirm Circle integration status, and see how Arc-native money movement becomes an application layer for agents: balances, payments, FX routes, hidden gas and policy controls.
Reviewer console
One place for the grant review.
Money MovementEstimate and execute Unified Balance, Bridge, Swap or Send with fees and proof.Live demoOpen the working operator demo and inspect the product surface.Latest proofReview money intent, policy, fee, receipt and settlement evidence in one envelope.Public evidenceInspect live operation, volume, success, proof and fee-revenue metrics.Wallet readinessCheck Circle source wallet, token lookup, readable balance and transfer guardrails.Known limitsClear review language for demo-ready rails and pending Arc mainnet deployment.RoadmapThree milestone path from Arc deployment to on-chain reputation and public beta.Version tagInterop and Risk Router release with Chainlink/CCIP-ready route evidence.VideoRecorded product walkthrough for the formal grant submission.
Reviewer mode
Four clicks to understand the product.
01Open Judge ModeStart from the guided one-page reviewer flow.
02Run workflowTrigger policy check, x402 offer, receipt and reputation update.
03Open proofReview settlement evidence, signed receipt and policy chain.
04Check consoleInspect Flow, Treasury, Reputation and Provider views.
Circle and Arc fit
Integration status matrix.
Configuration-ready
Circle WalletsServer execution boundary, one-time policy grants and developer-controlled signer adapter are implemented and fail closed without production credentials.
Demo-ready
Wallet OS / account layerOne agent-facing account surface for USDC spending, EURC invoices, FX-ready routes, card-like controls, CCTP and gas abstraction states.
Demo-ready
Transaction memosProof records now include invoice, agent, customer and batch references so a transaction hash can be reconciled by downstream systems.
Integrated
Unified Balance KitThe Money Movement console uses App Kit estimateSpend/spend with auto-allocation, forwarding, custom fees and resumable error handling.
Integrated
Swap Kit / liquidityArc Testnet USDC/EURC Swap executes behind a server-only signer and Kit Key, with slippage, approve strategy and a disclosed developer fee.
Demo-ready
x402 / GatewaySigned offer and receipt architecture for machine-to-machine API payment flows.
Testnet-ready
Chainlink on ArcOracle risk signal model uses Arc Testnet CCIP Router 0xdE4E...eab8 and chain selector 3034092155422581607 for reviewable route/data evidence.
Testnet-ready
Arc Network ResilienceLoad-aware states keep network congestion, retry scheduling and deferred settlement separate from product failures and agent reputation.
Integrated
CCTPApp Kit Bridge uses CCTP for supported Arc Testnet routes and preserves retryable step state, hashes and explorer URLs.
Planned
Paymaster / GasKestrel Gas models sponsored transactions, per-agent limits and USDC-funded execution policies.
Planned
ContractsEscrow, reputation and settlement contracts are ready for Arc deployment when production endpoints are available.
End-to-end workflow
Policy check to proof, with settlement evidence when configured.
The demo joins Treasury budget enforcement, Shield risk screening, Marketplace access, Chainlink oracle/CCIP readiness, Provider receipt validation and Reputation updates into one auditable operation. Wallet OS turns the same primitives into one account-style interface instead of exposing raw settlement mechanics to every operator.
Ecosystem fit
Built around the latest Arc direction.
Arc x Chainlink
Kestrel maps this into Interop: CCIP route evidence, oracle risk hashes, feed freshness and proof-gated settlement states.
Arc x Pulsar
Wallet OS follows the same app-layer pattern: one account surface for USDC/EURC balances, payments, FX-ready routes and hidden gas/CCTP state.
Transaction memos
Proof now treats memo context as first-class evidence, so settlement evidence can map back to invoices, jobs, customers and batches.
Stablecoin Kits
Kestrel uses the official App Kit SDK for Unified Balance, Swap, Bridge and Send while keeping low-level routing complexity behind one product flow.
Arc x Tradable / Uniswap
The roadmap now includes private-credit style deal lifecycle, compliance evidence and liquidity-aware stablecoin routes for provider settlement.
Arc status / load testing
Ops and Interop separate network congestion from product failure, so jobs can retry or defer settlement without damaging agent reputation.
Arc docs alignment
Mapped to primitives reviewers already care about.
Transaction memosProof now treats a payment as more than a hash: invoiceRef, jobId, agentId, providerId, batchRef and policy state are attached to the same proof envelope.Gateway -> Unified BalanceWallet OS maps Gateway deposit, balance, spend, forwarding and tx-hash capture into one operator-facing account surface.Stablecoin KitsFlow and Wallet OS model bridge, swap, forwarded spend, failed trace and latest on-chain transaction hash states as product-level evidence.CCIP / Chainlink on ArcInterop exposes route, router, selector, oracleRiskHash, feed freshness, RPC health and artifact-gating status before settlement finalization.Network resilienceOps and Interop separate Arc Testnet congestion, retries and deferred settlement from product failures and reputation penalties.
Next build order
What we should implement next.
01Independent identityKestrel leads every product surface; Arc appears only as the supported network and the Built on Arc infrastructure signature.
02App Kit executionShip Unified Balance → Swap/Bridge → Arc settlement as one wallet-signed flow with preflight estimates.
03Revenue + proofCollect developer fees, disclose the full breakdown and persist hashes, explorer links, trace IDs and recovery state.
04Production controlsConnect Turnkey policy signing, one compliance provider, Goldsky events and live oracle freshness checks.
05Measured pilotsOnboard pilot operators and report wallets, volume, execution success, proof completeness, fee revenue and recovery time.
Measurable milestones
What grant progress will be measured against.
Pilot adoption
3 design partners · Operator, API provider and treasury team using the same execution flow.
Transaction volume
1,000 testnet operations · Send, Bridge, Swap and Unified Balance executions with unique trace IDs.
Settled volume
10,000 USDC · Cumulative testnet volume before a production rollout decision.
Proof completeness
> 99% · Settled operations with policy, fee, hash, explorer and receipt evidence.
Execution reliability
> 95% · Operations reaching a terminal state without manual intervention.
Recovery objective
< 10 minutes · Resumable destination-mint failures retried before attestation expiration.
Revenue signal
75 bps · Disclosed fee; 90% of the custom fee routes to Kestrel and 10% to Arc.
Quote performance
p95 < 3 seconds · Route and fee estimate returned before a wallet signature is requested.
Roadmap
What the grant unlocks.
Validate the live App Kit flow, persist transaction proofs, add route telemetry and complete the first 100 wallet-signed testnet operations.
Add Turnkey-backed agent signing, a provider-neutral risk adapter and fail-closed checks before quote confirmation.
Stream onchain events through Goldsky, reconcile App Kit operations and expose success, latency, volume and fee dashboards.
Onboard three design partners, cross 1,000 testnet operations and validate the 75 bps execution-fee model.
Current status
What is live today.
Live product
Production web MVP deployed on Vercel with Supabase-backed APIs.
Review proof
Proof pages connect workflow id, policy checks, x402 receipt and settlement evidence.
Monitoring
Production monitor, Sentry runtime and Ops Health surface are active.
Network resilience
Kestrel separates policy approval, receipt evidence and settlement recording so temporary Arc Testnet congestion does not corrupt reputation or access decisions.
Application layer
Wallet OS now models Arc-native money movement as one operational account instead of raw wallet/chain mechanics.
Transaction memos
Proof pages now attach business context to payment evidence: invoice, agent, customer and batch references.
App Kit core
The Money Movement console imports the official App Kit SDK and exposes live estimate/execute paths for Unified Balance, Bridge, Swap and Send.
Signed execution policy
Every live execution now requires a fresh wallet signature, recipient allowlist approval, Circle compliance screening, amount-cap validation and a server-issued policy proof.
Monetization
A 75 bps developer fee is disclosed before signature, with the 90% Kestrel / 10% Arc split shown explicitly.
Circle Wallet execution
Wallet OS exposes source wallet, token lookup and balance readiness before any policy-gated transfer is attempted.
Roadmap
Grant unlocks live Arc deployment, Circle Wallets expansion, CCTP and contract work.
Known limits
Clear scope, no inflated claims.
- Arc mainnet deployment is pending external availability and grant scope.
- Server App Kit execution remains fail-closed until the production signer, execution secret and provider keys are configured.
- Provider receipts include a demo provider signature for review until external providers onboard.