CuratedLP

Concentrated LP positions go out of range as prices move — LPs who don't rebalance earn zero fees. But there's no way to delegate management without handing over full custody. And even if you could delegate, there's no verifiable track record to choose a manager by. No existing protocol solves active management, trustless delegation, and manager accountability simultaneously.

CuratedLP is a Uniswap V4 hook that turns a standard pool into a managed vault. LPs deposit wstETH + USDC and receive ERC-20 VaultShare tokens. They create a MetaMask smart account and delegate rebalance authority to a curator with custom caveats: correct target, allowed functions, fee bounds (100-50000 bps), and rate limiting. The curator runs on OpenClaw with a 5-minute heartbeat: it reads pool state, fetches price quotes from Uniswap Trading API, sends everything to Venice AI inside an EigenCompute TEE (Intel TDX) for verifiable private inference, and executes atomic rebalances. Every cycle produces a full execution log stored on Filecoin via filecoin-pin with PDP proofs, with CIDs indexed on-chain in a LogRegistry contract on Filecoin mainnet. Dynamic fees are set via beforeSwap with OVERRIDE_FEE_FLAG.

Three smart contracts deployed on Base Sepolia: CuratedVaultHook: Core v4 hook — vault deposit/withdraw, liquidity management via unlock pattern, curator rebalance, dynamic fee override in beforeSwap, fee tracking in afterSwap. VaultShares: ERC-20 share token, hook-controlled mint/burn. CuratedVaultCaveatEnforcer: MetaMask delegation caveat enforcer — validates target, function selector, fee bounds, and rate limiting. Trust boundary: curator CAN rebalance tick range, adjust fees within bounds, claim performance fee, call Venice AI via TEE, store logs on Filecoin. Curator CANNOT withdraw LP funds, transfer shares, bypass caveats, or exceed rate limits. AI loop (OpenClaw 5-min heartbeat): pool state (Base RPC) → Uniswap Trading API quotes → EigenCompute TEE (Venice AI sentiment + rebalance recommendation, attestation hash) → delegation redemption → on-chain execution → Filecoin log storage (CID → LogRegistry).

MetaMask Delegation Framework's custom caveat enforcers are a powerful primitive for scoped on-chain permissions — the CaveatEnforcer pattern lets you express exactly what an agent can and cannot do. EigenCompute TEE wrapping Venice AI means market reasoning is both private and verifiable — each inference returns an attestation hash. The hardest part was the atomic rebalance in the unlock pattern: remove-all then re-add-all must happen in one transaction, and settling actual deltas (not pre-calculated) required careful handling of the PoolManager callback. Filecoin's PDP proofs provide a permanent, verifiable audit trail without relying on centralized storage.