Govern the wallet.
Then let it move.

npm install arcanum-sdk viem

import { ArcanumClient } from "arcanum-sdk";
import { defineChain, formatUnits, parseUnits } from "viem";

const arcTestnet = defineChain({
  id: 5042002,
  name: "Arc Testnet",
  nativeCurrency: { name: "USDC", symbol: "USDC", decimals: 6 },
  rpcUrls: { default: { http: ["https://arc-testnet.drpc.org"] } },
});

// A live GuardedWallet on Arc Testnet. Swap in your own after you deploy it.
const client = new ArcanumClient({
  walletAddress: "0x34Ce73E82d48bF377597D8A3c80f9a6DF2085EFa",
  chain: arcTestnet,
  rpcUrl: "https://arc-testnet.drpc.org",
});

const policy = await client.getPolicy();
console.log("Per-tx cap:", formatUnits(policy.perTxCap, 6), "USDC");

const allowed = await client.simulate({
  to: "0xF45C70f2b08397419b11751041c0D9547CcEDEaD", // allowlisted vendor
  amount: parseUnits("1", 6),
});
console.log("Allowlisted vendor:", allowed.verdict);

const denied = await client.simulate({
  to: "0xB1a111A87A454977F5fB2c02F547D0f346e23Ca8", // unknown vendor
  amount: parseUnits("1", 6),
});
console.log("Unknown vendor:", denied.verdict, denied.reason ?? "");

import { WalletFactoryAbi } from "arcanum-sdk";
import { createWalletClient, defineChain, http, parseUnits } from "viem";
import { privateKeyToAccount } from "viem/accounts";

const arcTestnet = defineChain({
  id: 5042002,
  name: "Arc Testnet",
  nativeCurrency: { name: "USDC", symbol: "USDC", decimals: 6 },
  rpcUrls: { default: { http: ["https://arc-testnet.drpc.org"] } },
});

// The operator account that owns the Doctrine. Gas on Arc is paid in USDC.
const account = privateKeyToAccount(process.env.OPERATOR_KEY);
const walletClient = createWalletClient({ account, chain: arcTestnet, transport: http() });

// WalletFactory on Arc Testnet
const WALLET_FACTORY = "0x51A560589e23AcD2e57173641267f4583e0e65E7";

const policy = {
  perTxCap: parseUnits("50", 6),
  daily24hCap: parseUnits("500", 6),
  monthlyRollingCap: parseUnits("5000", 6),
  allowedCategories: 0b11111n,
  escalationThreshold: parseUnits("100", 6),
  requireAllowlist: true,
};

const agentSigner = "0xYourAgentSignerAddress"; // your AI agent's signing address
const council = [account.address]; // escalation approvers

const txHash = await walletClient.writeContract({
  address: WALLET_FACTORY,
  abi: WalletFactoryAbi,
  functionName: "createWallet",
  args: [account.address, "ResearchAgent", policy, [agentSigner], council, 1],
});
console.log("Deployed:", txHash);