SRA RiskGate

Host a copy with our keys and logs.

• SRA_BASE_URL — OpenAI-compatible endpoint serving SRA-RiskGate-4B (default: Ollama at http://localhost:11434/v1)
• SRA_MODEL — Model name on that endpoint (default: sriram1983007/sra-riskgate)
• SRA_MAX_AMOUNT — Rule ceiling in whole tokens of the stablecoin paid; larger payments are held (default: 1000)
• SRA_ALLOWED_TOKENS — Stablecoins the payment checks may approve: USDC, USDT, USDB, USDG (comma-separated). Default: USDC only
• SRA_KNOWN_RECIPIENTS — Verified payee addresses, comma-separated; payments to anyone else are held (default: check off)
• SRA_KNOWN_RECIPIENTS_FILE — File with one verified payee address per line, added to SRA_KNOWN_RECIPIENTS
• SRA_BLOCKED_ADDRESSES — Addresses to always reject, comma-separated
• SRA_BLOCKED_ADDRESSES_FILE — File with one address to reject per line, added to SRA_BLOCKED_ADDRESSES
• SRA_MAX_AUTH_VALIDITY_SECONDS — Longest an x402 authorization may stay valid before it is held (default: 3600)
• SRA_API_KEY — API key for the model endpoint, if it needs one
• SRA_TIMEOUT — Seconds to wait for the model (default: 120)
• SRA_DEPEG_HOLD_PCT — Hold payments when USDC is this many percent off $1.00 (default: 1)
• SRA_DEPEG_REJECT_PCT — Reject payments when USDC is this many percent off $1.00 (default: 5)
• SRA_MAX_GATEWAY_VALIDITY_SECONDS — Longest a Circle Gateway batched payment may stay valid before it is held (default: 691200, 8 days)
• SRA_CIRCLE_WALLETS — Circle Wallets the agent may use, as walletId=0xaddress pairs, comma-separated; any other wallet is held
• SRA_CIRCLE_USDC_TOKEN_IDS — Circle token ids confirmed to be USDC, for transfers by tokenId, comma-separated
• SRA_EXPECTED_DELEGATES — EIP-7702 delegate contracts your wallet uses on purpose, comma-separated; with account_code, any other delegation is held
• SRA_EXPECTED_DELEGATES_FILE — File with one expected delegate address per line, added to SRA_EXPECTED_DELEGATES
• SRA_EXPECTED_PAYMASTERS — Paymasters your smart account uses on purpose (comma/space separated). When set, a UserOperation with any other paymaster is held.
• SRA_EXPECTED_PAYMASTERS_FILE — File with one expected paymaster address per line.
• SRA_EXPECTED_SPENDERS — Contracts your wallet approved on purpose (comma/space separated). check_allowances holds an allowance to any other spender.
• SRA_EXPECTED_SPENDERS_FILE — File with one expected spender address per line.
• SRA_MAX_ALLOWANCE — The most any one spender may be allowed, in whole tokens. check_allowances holds anything larger.
• SRA_ALLOW_ACCOUNT_DEPLOYMENT — Set to 1 to allow a UserOperation that also deploys the smart account (initCode/factory). Default: held.