Transaction programs
The canonical unsigned IR exchanged between creative solvers and the conservative verifier.
Stages
A TransactionProgramV1 contains ordered stages:
cobia-v3for a separately committed bounded atomic Executor V3 program;wallet-transactionfor exact user-signed calls;async-deliveryfor a separately verified destination outcome;x402-authorizationfor exact payment authorization;researchfor non-executable findings.
Each wallet call commits chain, sender, target, value, calldata, and semantic labels. Provider artifacts are one-to-one with provider-backed wallet stages.
Open generation, closed verification
evm.raw@1 lets a solver propose arbitrary EVM calldata without making it
trusted. LI.FI and OKX adapters additionally normalize and commit provider
responses. The verifier always applies policy bounds and independent replay.
Programs are unsigned. They are never authorization verdicts and never contain private keys or wallet session handles.
The public exchange accepts both registered-capability and transaction-program decisions. Accepted raw calls are reproduced on a pinned fork and projected as an exact wallet-call batch. The wallet still signs each projected call; Cobia cannot broaden targets, calldata, value, or approvals after verification.