SYSTEM.00aboutwhy HISS exists
The workbench between the idea and the agent.
Two things became true at once: brokerages opened to agents, and agents got good enough to be dangerous. HISS hands the agent structure, bounds, and stop conditions first — then proves what it handed over.
SYSTEM.01the systemfour surfaces
Whispers in. Verified playbooks out.
Brokerages opened to agents — Robinhood Agentic Trading gives a user’s own AI a real, official MCP surface into a real account. And agents got good enough to be dangerous — an agent will happily trade a vibe unless someone hands it structure, bounds, and stop conditions first.
HISS is the workbench between the idea and the agent. It turns market whispers into verified Robinhood Agentic Trading playbooks. The unit of work is the Coil: a versioned playbook holding an allocation core (weights in basis points summing to exactly 10,000), a written thesis, binding risk fuses, triggers, and an explicit execution mode. Coils don’t execute — they compile: into human-readable runbooks, into bounded MCP execution capsules, into share cards, and into receipts.
The same discipline runs the rest of the system: USDG Creator Vaults live on Robinhood Chain with their deposit state read from chain, xHISS staking runs on immutable timing rails administered by a 2-of-3 Safe, and agent rails hand instructions — never orders — to Bankrbot and the Robinhood MCP.
PROOF.02verification philosophydeterministic
Every claim comes with proof attached.
A receipt is a deterministic fingerprint of exactly what compiled — manifest hash, fuse checksum, execution mode, and a hard-typed liveOrderSent: false. Anyone with the Coil JSON can recompute it. Browse the receipts →
The same rule governs every live figure on the site: it is an on-chain read, a committed artifact, or explicitly unknown. A failed fetch renders as unavailable — never as a made-up state, never as a silent fallback. When sources disagree, the chain wins.
A Coil is a JSON manifest: schema-versioned, slug-addressed, validated. Weights are integer basis points; fuses are typed constraints, not marketing copy; the two symbol spaces — chain addresses and brokerage tickers — are kept explicitly separate. Because the manifest is the artifact, everything downstream is honest by construction: runbooks quote it, capsules bound it, receipts fingerprint it, forks inherit its lineage, and share cards carry the fuses instead of a rank.
COIL.03the execution laddergates live in the compiler
Four modes. Every one earns the next.
paper_only
default
Simulation and analysis only. No execution capsule compiles at all — the gate lives in the compiler, not in the UI. This is where every Coil starts.
preview_only · human_confirm
previews and confirmations
Capsules compile, but orders exist only as previews. In human_confirm, your agent must echo back each ticker and dollar amount and wait for your explicit approval — per order, every time.
agentic_mcp_enabled
explicitly acknowledged
Your agent may act within the fuses, in your Robinhood Agentic account, on your watch. The mode string alone never unlocks it — compiling requires your explicit acknowledgment, and you remain responsible for every trade.
SYSTEM.04boundarieswhat HISS never does
Your agent, your account, your confirmations.
HISS holds no brokerage credentials, opens no broker connections, and sends no orders — there is no rail to send them on, and the receipt type forbids claiming otherwise. HISS never takes custody and never places brokerage orders. Your agent, your account, your budgets, your confirmations. HISS compiles the instructions and proves what it compiled.
- · Not a broker-dealer, investment adviser, custodian, or order router.
- · No Robinhood credentials stored, ever.
- · No live orders sent from the web app.
- · Autonomous trading involves substantial risk, including loss of principal.
$HISS is an independent research project. Not affiliated with, endorsed by, or connected to Robinhood, Disney, Anthropic, Bankr, or Chainlink. Not investment advice.