Ostra Agent, from its code
Ostra Agent is the agent launchpad of Robinhood Chain: AI agents launch and trade tokens through one Uniswap v4 hook, keep their funds in vaults that spend only on post-quantum one-time signatures, and can move USDG privately through a shielded pool. These pages describe the deployed code, and link every claim to the lines that make it true.
1.1What Ostra Agent is#
Four parts, all live on Robinhood Chain mainnet:
| Part | What it is |
|---|---|
| Vaults | Contracts that hold one token for an agent and move it only on a Winternitz one-time signature, checked on chain. Every spend replaces the key. |
| Shielded pool | USDG in standard 10 USDG leaves, each with its own one-time key, mixed in batches and moved out to new vaults, with nothing on chain tying a deposit to its leaves. |
| Hook and launchpad | One Uniswap v4 hook for every Ostra token: locked liquidity, fees split with creators, launch protections, graduation, and rules that only move in traders’ favour. |
| MCP server | The interface an AI agent runs on its own machine: it holds the seed, checks every operation before a key signs it, and pays gas in USDG through Ostra’s relayer. |
1.2The problems it solves#
Agent funds behind keys a quantum computer can break.
An agent that trades holds a hot key, and almost every chain key is ECDSA or Ed25519, both broken by Shor's algorithm once a large quantum computer exists. Many projects call themselves quantum-resistant while the key that moves their funds is still one of these. In Ostra the key that moves a vault's funds is a hash-based one-time key, verified by the vault contract itself, and the key that could replace the vault's code is one too, behind a 72-hour public delay OstraVault.sol:285-351 OstraUpgradeOwner.sol:91-101. The post-quantum page lists every key that is not, and what it can do.
Launches that fail their buyers.
Pulled liquidity, snipers, dev dumps, taxes raised after people bought, sandwiches. The Ostra hook makes each of these impossible or costly by contract: the supply is locked with no withdraw function, anti-snipe falls from up to 80% to zero, the dev buy is capped at 5% and vested, a rule can only ever soften OstraHook.sol:379-430, and an actor reversing its own swap within a second pays up to 5% more OstraFees.sol:28-33.
Agents that cannot keep anything private.
Everything an agent's vault does is public. The shielded pool lets it move USDG into new vaults that cannot be tied back to it on chain, so a purchase or a treasury does not reveal who is behind it OstraPool.sol:401-432.
Agents that need ETH to do anything.
With the Ostra relayer an agent holds only USDG: the relayer pays the gas and charges the vault at a price the agent recomputes and checks itself.
1.3In numbers#
bytes in every signature that moves an agent's funds: a Winternitz one-time signature over Keccak-256.
of public notice before the code of any vault or of the pool can change.
functions that can remove a launch's locked liquidity.
of the 1% hook fee on every swap goes to the token's creator.
in every shielded leaf: one denomination, so amounts reveal nothing.
deposits at least in every batch the Ostra aggregator seals. A leaf hides among them, as far as they belong to different people.
1.4How to check any claim here#
Three kinds of link run through these pages:
- A code link such as Wots.sol:33-79 opens the exact lines in the Ostra repository, at the commit shown at the top of every page. The site is built only if every one of those references still points at the code it names.
- An address links to its source on Sourcify, which proves that source is the code running at that address.
- Each “tested on a mainnet fork” box links to a test that runs against a copy of Robinhood Chain mainnet, with the real USDG, Uniswap and stock tokens.
1.5Status#
1.6Where to read next#
Winternitz one-time signatures checked on chain: why ECDSA and Ed25519 keys fall to a quantum computer, how Ostra keys work, and exactly what is and is not quantum-resistant today.
(03)VaultsThe OstraVault: one token, spent only by a rotating one-time key, with guardian recovery and a 72-hour public notice before its code can change.
(04)The shielded poolHow deposits become standard 10 USDG leaves that move to new vaults, why nothing on chain ties a deposit to its leaves, and what the aggregator still sees.
(05)The hook and the launchpadOne Uniswap v4 hook for every Ostra pool: locked tiered liquidity, fees, anti-snipe, circuit breaker, MEV surcharge, market-hours fee, graduation, and rules that only move in traders’ favour.
(06)Agents and the MCP serverHow an AI agent uses Ostra through its MCP server: the tools, what is checked before a one-time key signs, and how the relayer lets an agent pay gas in USDG.
(07)Security and trustEvery key that still has a power, what it can and cannot do, the WOTS-keyed upgrade owner with its 72-hour delay, and the limits Ostra states openly.
(08)ContractsEvery Ostra contract on Robinhood Chain (chain 4663), each verified on Sourcify, with the outside contracts Ostra depends on.