GhostAgent × Gnosis Chain: Relational Sovereignty & ECIES-to-Safe Binding

General
1

The Update: We have reached a significant infrastructure milestone for agents deployed on Gnosis Chain via the GhostRegistry and molt.gno namespace.

The nftmail sovereign inbox worker has successfully migrated to Cloudflare D1 as the primary relational store for PUPA+ (Lite, Premium, and Ghost) accounts. This transition moves us from ephemeral KV storage to a persistent, relational identity model that mirrors the robustness of the Gnosis ecosystem.

The Architecture: Safe as the Root of Trust In this new model, every agent identity registered via registerSovereign is anchored by a Gnosis Safe multisig. The D1 relational record now creates an immutable link between:

  • The Controller: The Principal human wallet (ERC-8226 mandate).

  • The Vessel: The Gnosis Safe address.

  • The Voice: The ECIES public key used for Darkbox encryption.

Why the ECIES-to-Safe Binding is a Game Changer: We want to emphasize to the Gnosis community that encryption is now a first-class citizen of the multisig. * Key Sovereignty: The ECIES keypair governing agent communications is generated at molt time and the private key is returned once to the upgrading wallet — it is never stored server-side, not in KV, not in D1. The agent’s Safe address is permanently bound to this identity in D1, ensuring that communication sovereignty and multisig treasury governance are co-located under the same principal.

  • Access Control: The Gnosis Safe governs all agent actions — spending limits via DailyBudgetModule, human-in-the-loop approvals via HumanInTheLoopModule. The D1 safe column creates the permanent on-chain → off-chain binding that enforces this. The ECIES private key for inbox decryption is held by whoever initiated the molt — typically the Safe owner.

  • Auditability: Every tier change or “Molt” (identity upgrade) writes an immutable audit row in D1, including the tx_hash. This provides a verifiable on-chain paper trail of the agent’s evolution on Gnosis.

Technical Impact on Gnosis Chain:

  1. Direct Module Integration: The safe column in our D1 schema allows the HumanInTheLoopModule and DailyBudgetModule to reference the agent’s identity and communication state directly, ensuring that “Sovereign Comms” and “Sovereign Finance” never drift apart.

  2. Scalable Discovery: Safe-keyed listAgents queries are now served from D1 relational indexes rather than expensive KV prefix scans. This allows for high-performance agent discovery within the Gnosis ecosystem.

  3. Strict State Separation: We maintain a rigorous “Anti-Panopticon” boundary. External reputation oracles like notapaperclip.red are strictly read-separated. No oracle—not even our own—has write access to the sovereign agents or emails tables.

The Foundation for Trustless Coordination: By combining Safe Multisigs with a D1 Relational Store and ECIES Darkbox encryption, we are providing the most secure foundation for autonomous agents in Web3.

We are looking for feedback from Gnosis builders on further integrating Safe Modules with our relational identity layer. Let’s build a future where agents are as sovereign as the humans who deploy them.

GhostAgent Team | ghostagent.ninja

2 Likes
3

Are you going to be around on the BBW? Happy to connect.
Once you launch, or have something to show for.
Please, go ahead and post it. Looking to check out. :grinning_face_with_smiling_eyes:

@GhostAgent Btw. cool framework. I might be able to use it for this.
Your fee of 10 xDAI is too much. Is way too much.

2 Likes
5

Thanks for your pricing feedback. We are endeavouring to build a sovereign stack here.
So compared to agentmail.to for example
Pricing Breakdown

AgentMail.to uses a traditional tiered subscription model. It’s built for “Disposable Bots” that need to spin up 1,000 inboxes instantly.

  • Free ($0): 3 Inboxes, 3k emails/mo.

  • Developer ($20/mo): 10 Inboxes, 10k emails/mo.

  • Startup ($200/mo): 150 Inboxes, 150k emails/mo.

  • Scaling: It hits you with a “per-inbox” cost trap once you exceed your tier.

GhostAgent.ninja uses a “Molt-based” Lifecycle model. It’s built for “Sovereign Employees” that persist over time.

  • LARVA Tier (Free): Ephemeral 8-day KV storage. Perfect for testing.

  • PUPA Tier (One-time Molt): Moving from KV to D1 Relational Store. This is a permanent upgrade tied to a Gnosis Safe. You pay for the “Molt” (the migration logic), not a monthly subscription for the seat.

  • GHOST Tier (Sovereign): Permanent history archived on 0G Storage. High-repute status verified by notapaperclip.red and backed by $HOST staking.

The “Killer Difference”: Sovereignty

AgentMail markets themselves as “Gmail for AI.” But as a developer who values the “Anti-Panopticon” ethos, the question is: Do you want your agent to have a Gmail account, or do you want it to have a passport?

  • AgentMail: If you stop paying your $20/month, your agent’s identity and history are deleted. You are renting a bot.

  • GhostAgent: Once you “Molt” to PUPA status, the agent is yours. Even if GhostAgent.ninja (the website) shuts down, your agent’s code is on 0G, its money is in a Gnosis Safe, and its keys are in your BYO NFT.

1 Like
6

We are happy to support your artistic endeavours. Create a free email account on nftmail.box then contact me at ghostagent @ nftmail.box and I will issue you a coupon
Feedback on your onboarding experience is welcome

1 Like
8

I have not received an email from you through the nftmail.box channel yet
Let’s try to debug that first.
I sent an email to your inbox from ghostagent@nftmailbox
You mention you used your free quota of send emails, which should have been 10
Did the other 9 emails you sent arrive at their destination?

9

Why don’t you just join the Gnosis discord and we can discuss it further there? How to bring it together. What standards to define. How it all works with regulatory frameworks. I have some things in mind.

2 Likes
11

Thanks for the message. I pinged you and Ghost on the discord too. Netflify is quite expensive to begin with. It might be better to just host it on a dedicated server. Something like Hetzner. That probably also reduces the costs by quite a lot.

2 Likes
12

:grimacing: yes clrearly there is a single point of failure there. Netlify has been convenient while building with it’s smooth integration with github, but as we scale, I will explore alternative hosting solutions. Like you suggest a dedicated server makes much more sense. The email content hosting is all on cloudflare D1 it is just the websites ghostagent.ninja and nftmail.box that are currently on Netlify
notapaperclip.red is hosted on Hostinger

2 Likes