Without it
Either you approve every single trade, or the agent gets your key. Neither works.
IntegrationsLedger
Routine trades run on their own. Anything bigger asks your Ledger.
Pilot treats a Ledger hardware wallet as the owner's final say. Small trades inside your limits run automatically through Harbor's limited key. Granting or removing permissions, and anything over your limits, goes to the Ledger for you to approve.
How it works
Watch a request go through it.
The square is the request. Follow it from part to part, read what happens below, and pick an outcome to see what happens when things pass, need you, or stop.
Pick an outcome
YouAsk and approve
PilotBuilds it exactly
LedgerSimulated in Speculos
HarborChecks your limits
Harbor's keyRoutine trades only
XRPL TestnetValidates
Step 01 of 4
Starts when in view
You ask for a trade
The AI can suggest it, but it can't sign or change permissions.
Why it matters
Small trades inside your limits happen without bothering you.
Why it matters
What changes with it, and what never does.
With it
Harbor gets a separate, limited key for routine trades. Everything else goes to the Ledger, which shows you the transaction and signs only after you confirm.
What never changes
The Ledger only signs, it never sends. Pilot checks the signature, and that nothing was changed, before Harbor submits it.