VAUBAN SHEET III · THE DRAWING

General plan / The drawing

Sheet III

One sheet.
Drawn by a human, read by the chain.

Every limit lives on a single order of works. The owner draws it; the agent works inside it. Each revision is numbered on-chain, so the sheet in force can always be traced.

Format order-of-works
Revisions numbered
Written by owner

Example sheet

Readable at a glance. No hidden clauses.

The sheet uses the same four words as the fort. If you can read the plan, you can read the policy. Values below are an example for a trading agent, not defaults.

  • Plain fields, one rampart per line
  • Targets matched by address and selector
  • Only the owner can revise it
; order-of-works — vauban.policy
; rev 3 · owner-only

agent    growth-01
ditch    perTx 0.10 ETH   perDay 1.00 ETH
curtain  allow Router[buy,sell]
         allow USDG[transfer]
         ; approve(MAX) always refused
gate     hold > 0.50 ETH   delay 6h
keep     owner 0xYourWallet…   freeze owner-only

Fields

Every field on the sheet.

FieldRampartMeaning
agent—The signer this sheet governs. One sheet per agent.
ditch.perTxDitchLargest value a single transaction may move.
ditch.perHour / perDayDitchCeilings per clock hour and UTC day. Reaching one fills the ditch until the next window opens.
curtain.allowCurtainContract address plus the function selectors permitted on it.
approve(MAX)CurtainUnlimited approvals are refused by the contract itself, whatever the allow list says.
gate.holdGateThreshold above which a move is queued instead of sent.
gate.delayGateHow long a held move waits before the agent or owner may release it.
keep.ownerKeepThe only address that may revise the sheet, cancel, or freeze.

Order of ruling

The same five steps, every transaction, every time.

  1. Keep

    Is the fort sealed? If frozen, turned back immediately.

  2. Curtain

    Is the target and function on the sheet? Unlimited approvals never pass.

  3. Ditch

    Does the value fit under every ceiling?

  4. Gate

    Is it over the hold threshold? If so, queue with a release time.

  5. Land

    Sent, and logged on-chain. A refusal reverts with the rampart that stopped it.

The keep is checked first, even though it is the innermost work: a sealed fort turns everything back without spending effort on the other ramparts.