Keep your wallet.
Put it to work anyway.
Non-custodial market making on 1inch Aqua: one balance, several strategies at once. No upfront deposit — tokens move only when a trade settles.
A promise doesn't check what's in your wallet.
Aqua lets a maker promise more liquidity than they hold, on purpose. Nothing checks the balance until a taker actually tries to fill.
When flow turns one-way, the wallet drains while every strategy's advertised book stays exactly where it started.
A promise may exceed your wallet.
A budget may not.
InventorySkewProvider plugs into SwapVM's stock fee opcode: flat while a strategy's budget is healthy, quadratic as it drains. The Harbormaster docks and re-ships before the wallet ever comes up short.
It watches so you don't.
The Harbormaster watches every strategy you've shipped. When one drops under its load line, it docks the promise and re-ships it against the balance your wallet actually holds.
Wallet balance changed. Your strategy detected the change and prepared a safe reallocation.
What the budgets buy you, measured with a paired control.
half →zero
Under 4× leverage, half of an unmanaged maker's quotes failed. With Doca: zero.
43 of 86 attempted fills reverted, unmanaged · contracts/scripts/amplification-experiment.ts+29%
Inventory retained under identical flow, against the same wallet left unmanaged.
30 fills, paired control · contracts/scripts/waterline-scenario.tsComing next
The same budget, applied to credit.
A budget that's known, live, and never overcommitted is also what lending needs to trust a position without custody. We're extending the primitive there next.
Common questions
What is Doca?
Doca is a budget layer for 1inch Aqua. Aqua lets one wallet back several trading strategies at once by shipping promises instead of deposits — a promise can outrun what you actually hold, by design. Doca adds the missing check: every strategy carries a budget of what it is allowed to consume, sized against what the wallet really holds, and Doca repairs allocations off-chain before underfunding turns into persistent failed quotes.
Is my money locked?
No. Nothing is ever deposited. Aqua only moves tokens straight out of your wallet during a fill, and you can spend from that same wallet without withdrawing anything first — Doca detects the balance change and resizes your strategies around it. There's nothing to withdraw, because there was never a custody step to begin with.
What happens if my wallet balance changes?
The Harbormaster notices. It watches every strategy you've shipped, and when one's budget runs low it docks the promise and re-ships it against what your wallet actually holds now — the same fix Aqua's own whitepaper recommends doing by hand. In this demo a local signer lets it act on its own, on camera; with your own connected wallet, today it prompts you to sign, the same as any other transaction.
Is this a business or a public good?
The budget primitive is open by design: any Aqua maker should have it. The product is what gets built on top of it — the desk, the agent, and credit next.
Is it only for 1inch Aqua?
Aqua-native today, by design: the fee provider plugs into SwapVM's own opcode, and every settling transaction runs through 1inch's official, unmodified contracts. The idea underneath — a budget that can never exceed what you actually hold — isn't Aqua-specific, and credit is the clearest place it generalizes next.
What about lending?
A budget already behaves like a line of credit: permission to spend against a real balance, with value pulled out when risk rises. Lending on Aqua would split into two honest halves — a non-custodial lender side using exactly this primitive, and an overcollateralized borrower side settled through escrow. The mechanism is designed and the primitive it needs is already live.
Is it live on mainnet?
Yes. Our contracts are deployed on Base mainnet, wired to 1inch's canonical Aqua registry: InventorySkewProvider and DocaApp. Both are source-verified with an exact bytecode match on Sourcify. The demo you're watching runs on a fork of that same chain, so every transfer is a real ERC-20 movement against the real token contracts, without spending real funds.
Can agents integrate?
Yes. The repo ships an MCP server (bun mcp/server.ts): an agent calls one tool to self-configure, discovers a maker's live strategies from chain logs, and reads budgets, surcharge and the honourable check. It holds no key, so you can hand the endpoint to an agent without handing over custody.