AGENT-NATIVE INCIDENT RESPONSE · READ ONLY BY DEFAULT

Bring your own incident.
Get back bounded authority.

Last Known Book can accept a captured case or a live transaction intake, reconstruct what is actually established, and return a machine-readable Authority Receipt. The investigation interface never signs or broadcasts a transaction.

OBSERVEDINFERREDUNKNOWNWRITE GATED

01 · INPUTAgent intent + incident evidence

Canonical case JSON or a transaction hash with optional market context.

→

02 · RECONSTRUCTVenue reality

Deterministic DreamDEX semantics where evidence supports them; unknown stays unknown.

→

03 · RETURNAuthority Receipt

Recommended action, truth counts, blockers, report hash and explicit write authority.

INTEGRATION SURFACES

One engine. Four ways in.

NO WALLET · NO SIGNING · NO BROADCAST

HTTP

POST /api/investigate

Bring-your-own-incident endpoint for apps and backend services.

{ "txHash": "0x…", "network": "shannon", "agentIntent": "BUY_NO 10 @ 0.42" }

WEBHOOK

POST /api/incidents

Generic inbound operational webhook using the same fail-closed investigation path.

incident source → LKB → report + authorityReceipt

MCP

POST /api/mcp

Agent tool discovery/call surface plus a local stdio adapter for tool-capable clients.

tools/list · tools/call · lkb_investigate

CLI

npm run lkb

Machine-readable local investigation, transaction intake and network checks.

npm run lkb -- tx 0x… shannon

THE DIFFERENTIATOR

The trading agent may be AI.
The layer that decides whether money moves is not.

{
  "recommendedAction": "ESCALATE",
  "writeAuthorized": false,
  "canMoveFunds": false,
  "executionPerformed": false,
  "inferenceCanAuthorizeSpend": false
}

NETWORK NORMALIZATION

Testnet assumptions do not leak into mainnet.

Live Shannon check ↗

Shannon · 50312tUSDC · expected 6 decimals

Mainnet · 5031USDso · expected 18 decimals

GuardRead ERC-20 decimals() before scaling

REPRODUCIBLE BY DESIGN

Every canonical case has a deterministic replay path.

npm run replay regenerates the machine-readable incident reports; npm test verifies they remain deterministic and byte-clean.

Open the Judge Packet →

Bring your own incident.Get back bounded authority.