Wallets & the Web3 toolset

Web3 in Sonderr is a precise thing: an opt-in toolset for wallets and on-chain actions, guarded by the strictest confirmation flow in the product. It is never on by default, never in the way, and never a marketing feature wearing a security costume. This page maps the whole surface: networks, tools, confirmations, watch mode, faucets and the hard lines Sonderr will not cross.

1 · Opt-in, always

A fresh install has zero Web3 surface. Wallet tools don’t appear in tool schemas, the model isn’t prompted toward them, and nothing chain-related runs in the background. The toolset exists when you configure a wallet or turn on watch mode — and it disappears when you turn those off. Web3 is a toolset next to the engineering core, not the core itself; plenty of users never touch it, and the product never nudges them to.

2 · Networks today

• EVM — Ethereum mainnet, Base mainnet, Base Sepolia (testnet). Addresses validated strictly (0x + 40 hex characters) before anything else happens.
• Solana — mainnet-beta, devnet and testnet, via the modern @solana/kit stack with the system and token programs.

Network lists are configuration, not folklore: each network entry carries its id, label, RPC endpoint and testnet flag, so what the agent tells you about “where this runs” comes from the same table the runtime uses.

3 · The toolset

Four tools, each doing one thing:

• create_wallet — generate a new keypair or key set for a configured network. Keys are generated and stored locally; the private material never renders in chat.
• prepare_wallet_transaction — build a transaction for your review: recipient, amount, network, fee picture. Prepare, not send — the output is a transaction awaiting confirmation, not a broadcast.
• prepare_wallet_swap — the same discipline for token swaps: route, amounts, slippage, quoted outcome — prepared for human confirmation.
• set_wallet_watch — turn address watching on or off, with the strictest authorization rule in the toolset (below).

4 · Confirmation cards, not chat promises

Here’s the mechanism that makes prepared actions safe. When you confirm a transaction or swap, Sonderr issues a local confirmation card carrying a short-lived capability. That capability is retained only in the matching card on your screen and is withheld from the model’s tool-result context — the agent literally cannot hold the approval, so it cannot replay it, describe it into another tool call, or have it leak through any output boundary. The signed action happens through the card path, in the open, on your machine. No auto-signing exists; there is no setting that creates it.

5 · Wallet watch — on purpose, off on purpose

Watch mode polls configured addresses and reports activity. Because it’s a persistent state change, it has a dedicated rule: the current message must explicitly start or stop watching before the polling state changes. Earlier conversations, older instructions and creative paraphrases don’t count. The Trading page’s wallet-read exception is the one deliberate carve-out, and it stays exactly as narrow as documented.

6 · Faucets — testnet fuel, cataloged honestly

Testnet work needs testnet funds, so Sonderr ships a faucet directory — the Solana official faucet plus community options like solfaucet.fun, stakely and the Togatech directory — with the faucet-claim skill as the playbook. Faucet entries are metadata (endpoint, network, what it dispenses), claims run through the same validated-fetch rules as everything else, and anything that looks like a mainnet “free money” faucet is treated as what it is: a scam, and out of scope.

7 · The hard lines

• Private keys and seed phrases never render in chat — not in tool results, not in errors, not in logs.
• No broadcast without a confirmed card; no “the agent decided to send.”
• Explorer and token URLs are validated before rendering; credential-bearing or unsafe links are rejected.
• Solana secrets enter only through SONDERR_WALLET_SOLANA_SECRET (env or secret store) — never pasted into a prompt.
• AI assessments about markets are labeled unverified evidence, everywhere, forever.