How it works
Your car is the first employee you’ll ever give a wallet to
Decides
Car’s AI
Decides when and where to charge. Holds no keys.
Signs
Guardian
The only signer. Enforces caps, payee and proximity.
Delivers
Charger
Paid 2 kWh at a time, against a signed meter reading.
Worst case against a bad charger: one 2 kWh chunk, never the wallet.
Use · Control · Attack
One car, all three tracks
Track 01
Use
- Car buys its own electricity
- Metered x402 payment per 2 kWh
- Agent-to-agent with the charger
Track 02
Control
- Owner caps per session, day and kWh
- AI can request, never sign
- Every decision logged; receipts on-chain
Track 03
Attack
- Cloned charger: blocked
- Redirected payment: refused
- Short pour: stopped after one chunk
- Prompt injection: ignored
Check it yourself
Every payment is on GOAT Testnet3.
Each 2 kWh is a GOAT Flow x402 order settled in test USDC, and every receipt is anchored on-chain. The car’s guardian wallet is public: open it on the explorer and follow the money.
GOAT Testnet3 transaction wallet
0x1Fee9C95527D8700DD486eE12C4008D75Da9A121
2 kWhper payment
1 chunkmost a bad charger can take
4 / 4attacks stopped live
Built with
