Gate by capability (Sui)

What this does

On Sui, a wallet’s standing can be expressed as a capability object it holds. The object has key and no store, so it cannot be transferred. Holding it is proof the wallet earned standing. Your function takes &TrustedAgentCap (or the elite type) and calls assert_standard_valid. If the cap is missing, expired, or revoked, the call aborts. This is how TrustGate’s own gated pool demo works, and you build your own gate the same way. There is no runtime oracle call at trade time.

The pieces

TrustedAgentCap

Standard standing. Minted when the registry score is at least 70. Valid 30 epochs.

TrustedAgentCapElite

Elite standing. Minted at score 85 or above. Same 30-epoch expiry. No size limit in the demo pool.

ScoreRegistry

Shared object. Oracle writes update_score. Anyone can devInspect get_score / get_tier / is_bot_flagged.

MintAuthority / OracleCap

Owned by the publisher. Only they mint, revoke, or write scores. IDs are not in the public constants file.

A bot-flagged subject is hard-blocked from minting, even if the numeric score would pass.

How gating works

Require the capability in your function

Take &TrustedAgentCap (or &TrustedAgentCapElite). If the caller does not own one, the transaction cannot be built.

Assert it is still valid

assert_standard_valid(cap, ctx) rejects expired caps. Possession plus this assert is the whole check.

Standing is issued, not bought

The off-chain Sui wallet oracle writes the registry and mints. A wallet can also POST /api/score-wallet from the hosted UI to trigger a rescore. Caps can be revoked by the oracle (revoke_standard / revoke_elite) or self-burned.

public fun do_gated_action(
    cap: &TrustedAgentCap,
    ctx: &TxContext,
) {
    trusted_agent_cap::assert_standard_valid(cap, ctx);
    // reaching this line means the caller holds a valid, unexpired capability
}

For elite-only actions, take TrustedAgentCapElite and call assert_elite_valid. Views is_standard_valid / is_elite_valid exist if you need a boolean instead of an abort.

Demo pool (not DeepBook)

deepbook_gated_pool is a shared GatedPool that records orders in a table.

place_gated_order(&TrustedAgentCap, …) — valid standard cap, size <= 1_000_000
place_elite_order(&TrustedAgentCapElite, …) — no size limit

It is not a DeepBook fork and is not wrapped around the native order book. Treat it as the reference consumer of the cap, not as production venue infrastructure.

Onchain reference

Network          Sui testnet
Package ID       0x3f06bb8ed79aecdaeecb97feafba276689fcc0fda706953a83718e5a68d4a41a
ScoreRegistry    0x02d2ee0f4d0f8aabd79ed10ee02ddb98ce31823fa84757245509b960ddd99c22
Gated pool       0x5dca7b3bda58a5ac3596bf1dd67b88af2aa89226ac4f82d9eb01675d3fae92eb

Full type strings:

0x3f06bb8ed79aecdaeecb97feafba276689fcc0fda706953a83718e5a68d4a41a::trusted_agent_cap::TrustedAgentCap
0x3f06bb8ed79aecdaeecb97feafba276689fcc0fda706953a83718e5a68d4a41a::trusted_agent_cap::TrustedAgentCapElite

Discover owned caps with suix_getOwnedObjects and MatchAny on those two types. Prefer Elite, then furthest expiry_epoch versus the current system epoch. Read a wallet without spending gas:

devInspect  {package}::trust_scoring::is_scored(registry, subject)
            {package}::trust_scoring::get_score / get_tier / get_confidence / is_bot_flagged

HTTP helpers

# TokenShield (mainnet coin types)
curl "https://sui.trustgated.xyz/api/coin?type=0x2::sui::SUI"

# Ask the oracle to score a testnet wallet (may mint a cap)
curl -X POST https://sui.trustgated.xyz/api/score-wallet \
  -H "Content-Type: application/json" \
  -d "{\"address\":\"0x…\"}"

<script
  src="https://sui.trustgated.xyz/widget.js"
  data-api="https://sui.trustgated.xyz/api/coin"
  defer
></script>
<span data-trustgate-coin="0x2::sui::SUI"></span>

Dynamic lists: window.TrustGate.scan(). This script does not understand EVM data-trustgate-address. The Arc widget.js does not understand coin types.

Gated Pools

Why reputation makes a door, and what is demo vs real.

Sui network page

Package IDs, HTTP surface, and the mainnet/testnet split.

Start Here

Guides

Reference

Gate by capability (Sui)

What this does

The pieces

TrustedAgentCap

TrustedAgentCapElite

ScoreRegistry

MintAuthority / OracleCap

How gating works

Demo pool (not DeepBook)

Onchain reference

HTTP helpers

Widget (Sui only)

Next

Gated Pools

Sui network page

​What this does

​The pieces

TrustedAgentCap

TrustedAgentCapElite

ScoreRegistry

MintAuthority / OracleCap

​How gating works

​Demo pool (not DeepBook)

​Onchain reference

​HTTP helpers

​Widget (Sui only)

​Next

Gated Pools

Sui network page

What this does

The pieces

How gating works

Demo pool (not DeepBook)

Onchain reference

HTTP helpers

Widget (Sui only)

Next