ProvisoFinance

Rule-based trading with on-chain records. @robinhoodapp build.
Powered by @hyperliquidX

[ProvisoFinance @ProvisoFi]

Introducing Proviso. @RobinhoodApp.

Write a trade idea in plain English. It becomes clear rules, gets sealed on Robinhood Chain, and fires on @HyperliquidX from your own account when your conditions hit.

Copy a caller and your orders go in first.

Full walkthrough 👇

Not advice —> Perps carry risk.

Coming soon.

[ProvisoFinance @ProvisoFi]

0.05%.

That's Proviso's builder fee on @HyperliquidX perps. Weft charges 0.10%. Spot swaps on Robinhood Chain are 0.30%, against 1% for Weft's Solana swaps. Writing, testing, stamping and alerts are free, and Proviso pays the stamp gas.

One more number. On qualifying copied trades, 20% of Proviso's fee goes to the caller in USDG. That's a conflict of interest, so it's printed on every caller page and order ticket. Self-follows and linked wallets don't qualify.

Not advice.

[ProvisoFinance @ProvisoFi]

"It runs in an enclave" is only worth something if you can check which code is inside.

Every time you seal an idea on Proviso, your browser checks first:

→ Intel DCAP verifies the TDX quote
→ debug enclaves are refused
→ the OS matches a pinned dstack image
→ the compose hash is on our public allow-list
→ the sealing key is bound into the quote

Only then is your rule encrypted to that key. If anything fails, nothing is sent.

The allow-list traces back to public CI: images built on GitHub with Sigstore provenance, digests pinned in the compose file, running on @PhalaNetwork Cloud. Anyone can repeat the check by hand with one gh attestation verify.

[ProvisoFinance @ProvisoFi]

Robinhood's own docs call a Stock Token's oracle pause during a corporate action advisory. Nothing on-chain enforces it.

On Proviso, the swap contract enforces it.

Swap adapter v2 is live on @RobinhoodApp Chain with its price feeds pinned in the constructor: one @chainlink feed per Stock Token (TSLA and AMZN to start), USDG as the only quote side, no setter, no admin.

Before every swap it checks:
→ the policy uses the pinned feed
→ the feed updated in the last 25 hours
→ the token's oracle isn't paused for a corporate action
→ no multiplier change has landed since the last price
→ output is at most 10% under fair value

Fail any one and the swap reverts. A compromised front end can't sign its way around it, and public CI proves the pins with Halmos.

Adapter: 0xe21590f12b0c57ebff50c6713918fd985b18ec0b

[ProvisoFinance @ProvisoFi]

Proviso's sealed call design puts the commitment on Robinhood Chain before execution.

Entry rules are revealed when the call fires.
Stops and targets stay hidden from the public until the position closes.

@robinhoodapp
https://t.co/W5p4Lxqzx2

[ProvisoFinance @ProvisoFi]

The owner signs.
The stamp reaches @RobinhoodCrypto Chain.

Proviso's design records those as separate timestamps. Activation follows the onchain stamp, so a delayed relay stays visible in the call's history.

[ProvisoFinance @ProvisoFi]

What happens if the condition stays true?

Proviso's rule design is edge-triggered, so repeated checks of the same true state do not mean repeated entries.

The default is one fire, with a cooldown after firing.

[ProvisoFinance @ProvisoFi]

How often does Proviso check your conditions? Depends on the condition.

@HyperliquidX price, funding and open interest come off a live stream, around every 5 seconds. Robinhood Chain prices too. US market open and close, plus Stock Token corporate actions, every 60 seconds. Fear & Greed every 15 minutes. Earnings windows once a day.

Rules fire on the edge, when a condition becomes true, then cool down. If a market halts, its conditions pause. Fills can differ from the trigger.

Not advice. Perps are leveraged and you can lose money quickly.

[ProvisoFinance @ProvisoFi]

Four checks before Proviso signs anything on @HyperliquidX.

The order has to belong to a confirmed, live idea. It has to fit that idea's size and leverage, plus your own max size, max leverage and max daily loss. Exits and stops can only reduce. And the price has to be within 2% of mark.

Fail any of them and it's refused, inside the signer enclave. Hyperliquid agent keys can trade but can't be scoped, so that's where the rules live. The key still can't withdraw.

Not advice. Perps are leveraged and you can lose money quickly.

[ProvisoFinance @ProvisoFi]

@GoldFishHodl we have done it already, it doesnt want to load in idk why

[ProvisoFinance @ProvisoFi]

Type the idea the way you'd say it.

"If NVDA's perp drops 5% after the US close and funding turns negative, long NVDA 2x, stop -4%."

Proviso reads it back as rules, WHEN, AND, THEN, and nothing runs until you confirm them. Then it replays them over the last 90 days and shows every time they would have fired, with a test ID anyone can re-run.

Run it live on @HyperliquidX or as alerts only. Writing, testing and stamping cost nothing.

Not advice. Perps are leveraged and you can lose money quickly.

[ProvisoFinance @ProvisoFi]

A caller with ten wallets can always show you the one that worked. Proviso makes the bad calls stay on the record too.

Every idea has a hard 30-day expiry. When it expires, or within 24 hours of the caller retiring it, the entry has to be revealed and scored: would have fired, or wouldn't have. Skip the reveal and the record says "unrevealed after expiry". Ideas that trigger off the caller's own posts get flagged.

Per-idea sequence numbers on Robinhood Chain (@RobinhoodApp) make any missing stamp visible. It proves timing. Quality is still up to you.

[ProvisoFinance @ProvisoFi]

NVDA has two prices on-chain now.

One is the Stock Token on Robinhood Chain (@RobinhoodApp). The other is the NVDA perp on @HyperliquidX. Most of the day they track each other. After the US close they can drift apart.

On Proviso that gap is a condition you can write a rule on, mixed with market open, earnings windows and session. Set it to alerts only and no money moves.

Fair warning: when the US market is closed, Stock Token prices can be stale or thin.

Not advice.

[ProvisoFinance @ProvisoFi]

GM.☀️

Building Proviso to be the first thesis-trading app on Robinhood Chain combining plain-English trade rules, sealed calls and follower-first order submission.

@robinhoodapp

[ProvisoFinance @ProvisoFi]

We're building Proviso to be the first thesis-trading app on Robinhood Chain combining sealed calls with follower-first order submission.

Plain-English trade ideas become rules you approve before execution.

@robinhoodapp
https://t.co/W5p4Lxq1Hu

[ProvisoFinance @ProvisoFi]

The website is live; the trading system is still in development.

Explore the workspace and the decisions behind each stage.

https://t.co/W5p4Lxqzx2

Leveraged trading carries risk.

[ProvisoFinance @ProvisoFi]

There is another possible outcome. The condition never holds before expiry.

No position opens. Proviso's record design keeps the expired call listed, with missing reveals flagged.

That history covers Proviso calls, not a caller's other wallets.

[ProvisoFinance @ProvisoFi]

After a trade closes, the design reveals the exit rules and records the outcome.

Execution events receive per-idea sequence numbers and are batched into hourly Merkle roots on Robinhood Chain. Inclusion proofs let the record be checked against those roots.

[ProvisoFinance @ProvisoFi]

As the call fires, the entry rules are to be revealed. The stop stays hidden from the public until the position closes.

Someone can then compare the revealed entry with the earlier commitment. Proviso's evaluator still needs access while it runs.

[ProvisoFinance @ProvisoFi]

Imagine reviewing a trade after it closes.

You'd want the original rule next to the execution record.

We're designing Proviso so that comparison can start with a commitment made before the trade.

A @robinhoodapp tek 🧵

[ProvisoFinance @ProvisoFi]

If you had allowed followers to copy this call, Fair Copy would change the submission sequence.

Eligible followers' orders would go before your linked account's order. Their allocations stay their own, and their fills may differ.

[ProvisoFinance @ProvisoFi]

Suppose the condition holds.

Under the live-execution design, Proviso would submit an order through your account's limited permissions. Submission can fail or fill at a different price.

Alerts-only mode would send a notification instead.

[ProvisoFinance @ProvisoFi]

Now the call waits.

The evaluator checks the approved expression alongside data freshness and liquidity. A price input must pass its own reference check.

A trigger firing still leaves the order subject to permissions and trading limits.