ARC: what happens when Tin Man is handed a wallet and a rulebook

An engineering note from Reinventy Solutions Corp. — October 2026

Most AI stories are about what a model can say. This one is about what an AI system can be trusted to do, on its own, with real money, inside limits it cannot cross.

ARC is an autonomous agent that operates on on-chain markets. It was built as a live exercise for Tin Man, our sovereign AI platform. ARC uses Reinventy’s own computing infrastructure. NVIDIA Jetson AGX Thor is the cognitive heart of Tin Man, supporting local inference without relying on a third-party cloud model service.

One thing must be clear before anything else. Reinventy provides the technology, and only the technology. We do not take custody of user funds or exercise discretionary financial management. The agent can execute only the operations authorized by the wallet owner’s mandate. We do not take deposits, we do not pool capital, we do not take a share of anyone's results, and we do not give financial advice. Every wallet belongs to its owner; every decision to use ARC on it is the owner's own, expressed in a mandate the owner signs and can revoke; every euro of gain or loss stays with the owner. Financially, everything sits outside Reinventy. What we built is the engine, the guardrails, and the record. The money never passes through us, by design.

ARC is currently used by a closed group of Reinventy shareholders, on their own wallets, on the Base network. It is not a financial product, not an offer, and not available to the public. It is the hardest test we could design for the question that actually matters in applied AI: can an autonomous system act in the world and stay inside the rules?

Here is what we learned, with numbers.

The rulebook is on the chain, not in the software

ARC never holds anyone's funds. Each user keeps their own wallet. What they give ARC is a mandate: a signed, time-limited authorization, written to the blockchain, that states exactly what the agent may do — which assets, how much per trade, how much in total, how much gas, how much slippage, for how long.

The limits are enforced by a smart contract, not by a promise. If ARC's software ever tried to exceed them, the transaction would simply be rejected by the chain. Anyone can verify the mandate on a block explorer. That is the difference between "trust our AI" and "check the contract".

Authority and freshness define the operating envelope:

• Bounded deployment — the design specifies a maximum deployment ceiling of 40%, with the owner’s actual limits visible before signing. Deployment limits describe permitted exposure; they are not a guarantee of a maximum monetary loss.
• Freshness before execution — authorization-critical observations have a five-second freshness requirement. Other inputs have their own explicit validity windows. Expired evidence blocks execution: freshness is a precondition, not a preference.

Every decision is explained, and kept

ARC evaluates the market in continuous cycles. For every cycle it records what it saw (oracle price, pool quote, liquidity, gas), what it computed (trend across several horizons, momentum, expected net edge after costs), what it decided and why, and — later — what the market did next. Each record is immutable and carries a stable identifier.

The planned full configuration (ten assets, eight agents) projects about 29 records per cycle, potentially more than half a million per day depending on cadence. These are sizing projections, not a claim of sustained production throughput. The decision archive is designed to preserve the observations and outcomes needed for audit and research. It is an audit trail first. It is also the raw material for the next step: a research model trained on decisions with known outcomes, using Reinventy’s own computing infrastructure and the evidence generated by the system.

The AI advises; it does not sign

Two NVIDIA Nemotron models — Nemotron 3.5 Lightning (30B) and Nemotron Nano 3 Omni — run locally on a Jetson AGX Thor in NVFP4 precision. They propose parameter variants within an allowed set, review decisions, and flag anomalies. They do not write executable code, never see a private key, and cannot place an order. The execution path is deterministic and the contract has the last word.

This is a design choice, and it is the one we are proudest of. "Advisory only" is how you get the judgment of a large model without ever handing it the keys.

Costs measured on the chain, not estimated

Before adding any asset, ARC measures the real cost of a round trip on the actual pools. On Base, routing through the best available pool, a USDC → ETH → USDC round trip costs 0.02%; cbBTC 0.03%; AERO 0.11% (measured 10 October 2026). These rounded research measurements are snapshots for the tested routes and trade size, not fixed future execution costs. Gas, price impact, liquidity and route choice can change the result. For comparison, a 0.3% pool fee on each leg alone represents approximately 0.6% of round-trip friction, before additional costs.

Why it matters: a strategy must first overcome its total execution costs before it can produce a positive net result. Lower measured friction widens the range of opportunities worth evaluating; it does not establish that any strategy will be profitable. Infrastructure is part of strategy.

Built like infrastructure, because it is

• Sovereign compute: Reinventy’s own computing infrastructure, with NVIDIA Jetson AGX Thor at the cognitive heart of Tin Man. Local inference keeps model execution under Reinventy’s control.
• Separation of powers: the application, the signer and the control plane run on isolated machines with mutual TLS; the signing component holds no user funds and no user keys.
• Everything that expires is tracked: every certificate, attestation, qualification and credential in the system lives in one registry with automatic renewal and alerts 24 hours before expiry. The objective is to make expiry and service degradation visible before they interrupt operation.
• Release discipline: a frozen activation path, a mandatory acceptance test on a forked copy of the chain before any release, and a rollback that is automatic, not heroic.
• Independence under load: a qualification requirement that one user’s activation must remain responsive when other agents are running. Multi-agent acceptance and long-duration stability checks are part of the development programme.

What ARC is not

ARC is not a financial service. Reinventy is a technology company: it does not custody, manage, pool or intermediate anyone's funds, takes no fee on results, and gives no investment advice. ARC does not promise returns, and this page does not contain any. The agent operates inside limits chosen by each user; markets go down as well as up; capital stays in the user's wallet and remains exposed to market risk within the signed mandate. The pilot is private and limited to Reinventy's shareholders, on their own wallets. Nothing here is investment advice or a solicitation of any kind.

Why we built it

Because the next generation of AI systems will not be judged by their benchmarks. They will be judged by whether an organization can hand them authority, bounded and verifiable, and sleep at night. ARC is Tin Man's proof of work on that question: an autonomous agent with real authority, real limits, and a complete record of every decision it makes.

Version 2.0 is in development: multi-asset operation, two strategies, an expanded decision archive and thirty-day operating stability are its targets. Release remains subject to completion of acceptance and stability testing.

Reinventy Solutions Corp. builds sovereign AI systems for organizations that cannot afford to outsource judgment.

Images: original conceptual illustrations created for Reinventy. They illustrate the architecture and are not photographs of deployed hardware.