An autonomous treasury agent that is provably incapable of breaking its mandate. A policy written in plain English compiles to seven deterministic rules; every proposed move into licensed RWA vaults is checked against them with live vault data, and every decision — allowed or refused — emits a hash-linked receipt anyone can verify and replay.