Documentation
Ravelin Wall is pre-release. Each guide marks what you can run today, what is specified but not deployed, and what is planned. Snippets that cannot run yet are labelled as pseudocode.
Quickstart →
Install, configure the network, create a constrained test account, submit an operation and inspect the decision.
Policy schema →
Canonical JSON schema, every rule, precedence, units, limits and validation errors.
Errors and operations →
Reason codes, retry semantics, operation states, reservations and recovery.
Account abstraction →
ERC-4337 validation, authorization binding, replay protection and human approvals.
Architecture →
Control, enforcement, chain and observability planes, and how they fail.
Security model →
Threats, trust boundaries, key lifecycle, limitations and release gates.
What exists today
| Component | Status |
|---|---|
| Canonical policy schema 1.0 JSON Schema and TypeScript types; validated in the browser workbench. | Available · local simulation |
| Deterministic local simulator Runs the evaluation order on example data. Never signs or broadcasts. | Available · local simulation |
| Rust policy engine Production evaluator implementing the same schema and reason codes. | Specified · not deployed |
| Atomic budget reservations Serialized ledger keyed by account, agent and window. | Specified · not deployed |
| TEE-backed signing (AWS Nitro) Policy-bound signing with no arbitrary-signing interface. | Specified · not deployed |
| ERC-4337 validation module On-chain rejection of operations without a valid Ravelin authorization. | Specified · not deployed |
| Wallet sign-in and sessions SIWE challenge and verify, HttpOnly sessions, organizations and roles. Live once the deployment is connected to Postgres. | Built · control plane |
| Authorization API OpenAPI 3.1 contract specified; evaluation and operation endpoints are not published yet. | Specified · not deployed |
| TypeScript SDK (viem) @ravelin-wall/sdk. Not published. | Specified · not deployed |
| Python SDK Published only once its semantics match the canonical API. | Planned |
| Developer console Runs as a simulation workspace in the browser. The authenticated console needs the control plane, which is not deployed. | Available · local simulation |