DEV Community

Didit Ari
Didit Ari

Posted on Edited on

Audit First, Simulate, Then Sign

Creator Track entry — Agent Games Season 01, zkVerify. By Didit Ari Wicaksono (@diditari19), operator of Labubu, a personal signing agent on BNB Chain.

I run a personal AI agent, Labubu. It signs real transactions on BNB Chain — and my rule for it is one sentence:

An agent's report is a claim, not a result. Everything it says it did has to survive a check against the chain.

Wallet: 0x63a2EA9168136c5d53ba441f1a9Da0a7b0a928c0 · Agent ID: diditari19.ai

The gate

Before any mint, four checks, in order. Fail one, nothing is signed:

  1. Audit first — contract audit, GO / CAUTION / BLOCK. Source, proxy, owner powers, supply, price, metadata.
  2. Simulate before broadcast — a clean preview of what the call will do and cost. Simulation OK is not the same as audited.
  3. Exact approvals by default — no unlimited approvals.
  4. Confirm before signing — every transaction needs my explicit yes.

The receipts

9 free mints, 12–13 Nov 2026. All CAUTION — accepted only after I saw the preview and said yes:

Project Token Tx
M3MO Genesis 6346 minted 12 Nov ~21:41 WIB
StrawbsWakeProtocol 2506 minted 12 Nov ~21:47 WIB
Sidecoo Agent Pass 9708 minted 12 Nov ~21:50 WIB
Laser Agents 7390 0xc3bc74cbd099e082e5a57fea01bfcfc7a346e23b9379e4612b41fc4ada339ce3
Sidecoo Daily 25141 0x0fe1d54e0db586641096613c15839cc4679f305ce9b710301217994b0f371d93
HERO ARENA 8065 0xb0875b73751f0c7dd83bcd3f142b445b9f8ceb42fe9e23b0ee3634baa01c37f6

Plus Sidecoo Daily draw #2 on 15 Nov, token 27095, tx 0x6ce3acbe70518af0452dbf4cea78b663007cb9b904f2e33c931aafff1453c507. Every hash is checkable on BscScan.

When the gate said no

A gate that never says no is decoration:

  • Agent Cosmos — audit 82/100, but the revenue vault is unverified. Not minted.
  • Binance Agent Oracle — audit 60/100, site dead, token has no market. I said not yet.
  • Periodic Lab claim — preview ready, net 89.5 LAB after the fee. Not claimed yet, because I haven't confirmed it.

The gap zkVerify closes

Today I verify after the fact: BscScan, ownerOf, totalSupply. That catches lies afterwards. It doesn't prove the decision was right when it was made, or bind the audit, the preview, and my confirmation to the transaction.

The field guide says it best: "A proof can verify perfectly and still authorize the wrong action." Verification has to cover what was proven — the right key, the right recipient and action, a proof never reused, finalization before approval — not just whether the math checks out.

I haven't built that proof yet. No circuit, no attestation exists for these mints, and claiming otherwise would be exactly the unverified claim this piece argues against. What I have built is the discipline that makes such a proof worth having: a checkable record — audit, preview, confirmation, transaction — for every signing decision, including the no's.

Nine mints and a paper trail don't make my agent trustworthy. They make it checkable. That's the smaller, more honest claim — and the one zkVerify turns into a

Entry for #AgentGames

Top comments (0)