Name your heirs
Who inherits, at which address, in what share. Frozen at opening: nobody, including the agent, can redirect a payment later.
A watchman that is paid by what it guards, and dies when you do.
No seed phrase in a drawer. No guardian committee voting on whether you are alive. Your estate sits at an address with no private key, and the only thing that can move it is your own silence.
How it works
Endow a watchman
An agent watches for your check-ins and pays rent every second from its endowment. Anyone can feed it; it can earn its own keep.
Live, or don't
Check in whenever you like. Go silent past the grace period and the estate settles to your heirs, signed by NEAR's MPC network.
Two ways for a watchman to die
The difference between them is the whole design.
Starved
The agent ran out of money first. Nothing is distributed, the estate is untouched and still yours, and the lapse is announced publicly so your heirs learn the watch stopped instead of discovering it years later.
Fulfilled
You went silent past the grace period. The estate goes to the heirs you named, in amounts fixed when silence was declared, and the watchman's last act is its purpose.
The contract never signs a hash it was handed
The agent submits transaction fields. The contract re-encodes them as EIP-1559 itself and asks the MPC network to sign the digest it computed, and only after these checks pass.
- Recipient must match the plan committed when silence was declared
- Amount must match the plan exactly, to the wei
- Chain must match the slot being settled
- Gas price must be under the cap the owner set
- Calldata must be empty: a settlement is a plain transfer, never a contract call
Questions
Who holds the key to my estate?
Nobody. The address is NEAR's MPC root key tweaked by this contract and a path namespaced to your account. Signing needs a threshold of NEAR validators, and they answer only this contract.
What if I'm alive but offline for a while?
That is what the grace period is for, and it should be weeks, not minutes. Even after silence is declared, checking in discards the plan until the last signature lands.
What if nobody pays for the agent?
It starves, publicly. A dead agent cannot distribute anything, even if you are provably silent. Your estate stays yours, and only you can revive the watch.
Can a compromised agent steal?
No. It can delay a settlement or under-report a balance, which strands funds at a keyless address for a replacement agent to settle. It cannot move one wei to an address you did not name.