One sponsor sets one budget across many independent agent wallets. Settlement decrements it in contract state, overspend is stopped on-chain — fail-closed — and the operator cannot raise that ceiling unilaterally, silently, or instantly. Built on ERC-4337.
✗An operator runs many agent wallets paying for APIs, data, and services with no human per-transaction.
✗You can cap each wallet individually, but not a single TOTAL ceiling across the whole fleet.
✗A bug, prompt-injection, or compromised orchestrator fans out across wallets — each under its own limit, collectively draining far more than intended.
✗Existing controls enforce off-chain, so you trust a backend, not a contract.
✓Sponsor-set: the funder, not the spending agent, sets the budget.
✓Aggregate across untrusted wallets: N wallets draw down ONE pooled budget keyed by campaign, never by wallet.
✓On-chain fail-closed: at the ceiling the budget caps the draw and the campaign auto-deactivates in contract state — auditable, not an after-the-fact alert.
✓Risk-direction governance: a timelock raises the cap on a public delay; a guardian lowers, deactivates, or pauses instantly.
Per-wallet limits exist everywhere. A sponsor-set, aggregate, on-chain-enforced ceiling across wallets it does not control does not.
Use a per-agent limit (Coinbase Spend Permissions, Circle Agent Wallets, ERC-7715, Kite) AND a GasX fleet-wide pooled ceiling. They compose.
Honest status: the shipped engine enforces an aggregate gas ceiling, proven on testnet; stablecoin-value (USDC) capping is shipping next. Built on ERC-4337 (EntryPoint v0.9).
GasX is open-source and on testnet. Read the contracts, run the tests, and tell us what your fleet needs to spend safely.