How it works
Your wallets
Where your money sits, and why the agent cannot reach it.
You have two wallets. One holds your money and only you can withdraw from it. The other is the agent’s, has a budget you set, and cannot move funds out at all.
That split is the reason an agent can trade for you without being able to take from you. It is not a policy we promise to honour — the two wallets are different objects with different permissions, and the second one was never given the ability to withdraw.
The diagram in words
Two separate wallets. Your vault holds your money and only you can withdraw from it. You allocate a budget to the operator wallet, which the agent uses to place orders on Hyperliquid. The operator has no withdrawal path: that route is drawn as a dashed line into a stop bar.
The vault is yours
Section titled “The vault is yours”Your vault is an embedded wallet created for you at sign-up. Deposits land here. Withdrawals leave from here, and only when you initiate them.
XIO does not hold your keys, and there is no seed phrase to lose — recovery works by linking a second login method to the same account. We will never ask you for a private key or a seed phrase. If anyone claiming to be XIO does, they are not XIO.
The operator is the agent’s
Section titled “The operator is the agent’s”When you bring Lloyd online, it gets its own wallet — the operator — with an explicit budget drawn from what you have allocated. The operator is registered with Hyperliquid as a trading signer. It can open positions, close them, and manage orders. It has no withdrawal path.
Raising that budget requires your signature. Lowering it takes effect immediately, without one — tightening should never be harder than loosening.
What the agent can and cannot do
Section titled “What the agent can and cannot do”| Lloyd can | Lloyd cannot |
|---|---|
| Open and close positions within your plan | Withdraw funds, to any address |
| Place, amend and cancel orders | Move money between your accounts |
| Size positions up to your limits | Exceed the operator’s budget |
| Trade the markets your plan names | Trade markets outside your plan |
| Use leverage inside your band | Raise its own limits |
| Stand aside and do nothing | Change its own permissions |
The right-hand column is not a list of things Lloyd has been instructed to avoid. Each one is refused by a layer that runs before a trade is signed — see The three checks.
One signer, one writer
Section titled “One signer, one writer”Each trading signer has exactly one writer. Strategies do not share a signer, and a retired signer address is never reused. This is what stops two parts of the system from racing each other into a position you did not ask for, and it is why your positions reconcile to a single, readable history.