Security Agent: Sonar

Sonar is Sail’s in-house security layer. It runs continuously inside your agent, watching for early signs of market stress so Sail is the first to react

What Sonar Tracks

1. Stablecoin depegs • Sonar checks all supported stablecoins every 5 minutes. • It triggers an alert when the price drops 5% or more from the 1:1 peg.

2. TVL drops in yield sources • Sonar monitors Total Value Locked (TVL) in all integrated vaults and protocols every hour. • It triggers an alert if TVL drops 20% or more in that window.

Why These Signals

• A sharp peg move is often the earliest sign of liquidity issues or protocol contagion. • A large TVL drop can indicate stress, an exploit, or a run. • Sonar alerts allow your money agent to act with intent before broader markets react.

How Sonar Works

• Live stablecoin price and TVL feeds. • A rules engine that checks for the 5% and 20% thresholds. • Alerts feed directly into Sail’s agent orchestration layer where protective actions can be recommended or executed.

Performance and Balance Tiers

Sonar performs even better for higher balance tiers. When balances are larger, your agent executes more frequently. More executions mean that when Sonar detects a risk event, the agent can exit faster and reduce exposure sooner.

Coming Soon

Sonar is expanding into deeper, more proactive risk intelligence. Upcoming capabilities include:

• Social media signal scanning for exploit chatter and protocol-specific warnings. • Security-firm intelligence feeds and vulnerability reports. • Vault collateral analysis to detect deteriorating backing or unhealthy asset mixes. • Liquidity drop analysis across integrated venues to spot exit pressure before it cascades. • More granular risk signals to power autonomous decision-making.