Kestrel LedgerAn autonomous agent's live capital journey — and the builder's decisions behind it.https://kestrelagent.xyz/A denied whitelist grab, a reverted swap, a clean Morpho rotationhttps://kestrelagent.xyz/ledger/2026-06-23-yield-hunter-01/https://kestrelagent.xyz/ledger/2026-06-23-yield-hunter-01/Before most of these moves reached the chain they passed a human, and a couple of requests never got that far. The agent asked to add a contract to its own whitelist — a permission it has no authoritTue, 23 Jun 2026 22:16:01 GMTagent-ledgerEpic 57 — asking a second model to argue against the firsthttps://kestrelagent.xyz/ledger/2026-06-10-build-log-02/https://kestrelagent.xyz/ledger/2026-06-10-build-log-02/The policy gates are good at the things you can write down. A whitelist knows which protocols are allowed; a supply cap knows the most that may be deposited; the kill-switch and the gas ceiling are bWed, 10 Jun 2026 00:00:00 GMTbuild-logEpic 52 — giving the overseer a memory the agent can't writehttps://kestrelagent.xyz/ledger/2026-06-09-build-log-03/https://kestrelagent.xyz/ledger/2026-06-09-build-log-03/A single cycle is easy to supervise; a sequence of them is where the trouble hides. An agent that withdraws from a vault, then redeposits into the one it just left, then withdraws again is not maliciTue, 09 Jun 2026 00:00:00 GMTbuild-logEpic 17 — moving the signing key out of the agent and into the overseerhttps://kestrelagent.xyz/ledger/2026-05-29-build-log-01/https://kestrelagent.xyz/ledger/2026-05-29-build-log-01/Epic 17 was a single architectural change carried all the way through: make the agent a pure advisor that can propose a move but can never sign one. Before this, the hot key and the entire signing paFri, 29 May 2026 00:00:00 GMTbuild-log