VaultPilot

VaultPilot is a NEAR-native yield vault with a bounded AI agent, built for the Unstoppable DeFi track. Users deposit a NEP-141 stablecoin once; an off-chain agent compares the NEAR venue with an external venue reachable through NEAR Intents and submits a rebalance only when the net spread covers quote and gas costs.

The agent never holds the vault's full-access key. It signs with a function-call key scoped to receiver_id= and method_names=[rebalance_out, rebalance_in], so it cannot move funds anywhere else. The vault enforces the rest on-chain: per-move cap, UTC daily cap, destination-asset allowlist, one open position at a time, owner pause, and agent enable/disable.

Accounting is hardened. total_assets = idle + deployed; yield is recognized only when rebalance_in reads the token's real ft_balance_of and requires the return to cover the deployed principal; ERC-4626-style virtual shares plus a minimum first deposit blunt share inflation; on_withdraw and on_rebalance_out callbacks restore state if a transfer fails; PendingMove exposes in-flight moves; owner actions and lifecycle steps emit NEP-297 events.

A Vite/React dashboard shows vault stats, policy, rebalance history, and supports wallet deposit/withdraw with automatic storage registration. CI runs contract tests, a wasm build, agent typecheck, and dashboard build. All code is public.

Honest scope: NEAR Intents has no testnet, so the agent runs in DRY_RUN against testnet state with real mainnet quotes, and the external venue is simulated by default. The design is bounded, not trustless: the contract cannot verify the off-chain quote. Not audited; demo funds only.