imToken’s Sigil Adds a Verifiable Security Guardrail to AI Agent Signing
As AI agents evolve from answering questions to executing trades, payments, and onchain actions on behalf of users, the old “reply Yes to confirm” model is becoming increasingly inadequate. In crypto, that weakness is especially obvious: a user may authorize an ETH purchase or wallet action without clearly seeing the trading venue, asset amount, recipient, slippage, approvals, or protocol calls involved. imToken’s latest brand update introduces a fourth “S” alongside Store, Send, and Stake: Sign. Under that framework, Sigil emerges as an early proof-of-concept designed to preserve user awareness, approval rights, and final control when software starts acting autonomously. Sigil positions itself between the AI agent and the wallet. Rather than blocking automation altogether, it lets users predefine which low-risk actions can proceed automatically and which sensitive actions must stop for explicit approval. When an agent attempts a sensitive task—such as spending funds, signing a transaction, sending a message, deleting files, or running code—Sigil pauses execution, parses the real request into a structured confirmation card, and delivers it to the user via Telegram. Approval then requires Passkey-based authentication and biometric verification. The product’s core principle is “What you see is what you sign.” Sigil aims to bind display, signature, and execution together so that the content shown to the user is the same content signed by the user and the same request ultimately executed by the system. It further strengthens this model through policy tiers such as Relaxed, Balanced, Strict, and Custom; a mnemonic-free design; chain-fixed independent confirmation modules rendered in a sandbox; short validity windows; one-time signatures; and hash binding of request parameters. In practice, Sigil reflects a broader thesis: the wallet industry’s experience in key management, digital signatures, identity verification, and permission control may become foundational infrastructure for the AI agent era, not only in crypto but also across email, files, terminals, payments, and online services.
