I built an autonomous treasury agent, then let a code review bot find every way it could lose money

Описание и применение

Создан автономный агент TreasuryForge с проверкой рисков, ручным утверждением и автоматическим обзором кода, выявивший критические ошибки и повысивший безопасность.

Задача

Ensuring a safe autonomous treasury agent required robust approval gates, risk checks, and automated code review to catch hidden bugs that could lead to financial loss.

Результат

The project achieved a robust, human-checked autonomous treasury loop, identified and fixed critical bugs, and demonstrated the value of automated code review in financial agent development.

Рабочий процесс

• 1. Agent calls get_portfolio and get_transaction_log for evidence.
• 2. Agent calls check_risk_limits for the proposed trade.
• 3. If risk breach, run a sandboxed Python script to simulate correlated shock and compute drawdown.
• 4. Agent proposes trade with reasoning; execute_trade recomputes risk server-side.
• 5. Human approves or denies via TrueForge user.tool_approval.
• 6. Sub-agent reviews last 20 decisions, backtests alternative risk thresholds in sandbox.

Доказательства

The approval gate had a bypass. Early on, the wallet server bound to 0.0.0.0 instead of localhost, and the reset endpoint had no auth.

Источник

A trade could double-execute on retry. execute_trade reported failure to the caller after it had already committed the write.

Источник

Fixing one race condition created another. Switching some FastAPI routes from async to sync made day-start risk-baseline rollover non-atomic.

Источник