The first AI agent you can hand a real wallet to.

Agents that get broad real access are unreliable today — not malicious, just unreliable. That's not a guess; it's what operators already running agents against real systems report firsthand. The question that actually matters isn't "will it make a mistake," it's "can a mistake cost real money." Custodian is the answer to that second question: a kernel-enforced ceiling an agent cannot talk its way past, with a real human out-of-band the only path beyond it. It's infrastructure for any team — an MSP, a fintech, anyone giving an agent real account access — that needs that guarantee before they'll let an agent near a real account at all.