Zap Pilot
What the runtime does, what is still planned, and how to check the evidence.
Zap Pilot is building a self-hosted runtime for programmable portfolios.
Portfolio rules you can read, not fear and greed
Live DMA/FGI Portfolio Rules is evaluated daily on Zap Pilot-hosted servers and produces an advisory target allocation with a decision packet.
Live Deposits you start yourself go straight into positions you hold: the Spark USDC vault on Morpho (Base), GMX v2 GM pools (Arbitrum) and Hyperliquid HLP, routed through LI.FI.
Status of every capability
The table below reads the status of every capability from the same facts as the site and the pitch.
- LiveRuns in production today.
- ResearchA working experiment outside the production path.
- In developmentPartly built, not available to users yet.
- PlannedNot built yet.
| Capability | Status | What it means today |
|---|---|---|
| Reference strategy | Live | DMA/FGI Portfolio Rules is evaluated daily on Zap Pilot-hosted servers and produces an advisory target allocation with a decision packet. |
| Market signals | Live | 200-day moving averages, crypto and US-equity Fear & Greed, and ETH/BTC, shown in the app next to each decision. |
| Portfolio tracking | Live | Wallet positions are refreshed daily and shown in the app, read-only. |
| DCA Classic benchmark | Live | Starts half in BTC and moves the other half into BTC in equal daily amounts. Every reference-strategy backtest is measured against it. |
| Deposit plans | Live | Deposits you start yourself go straight into positions you hold: the Spark USDC vault on Morpho (Base), GMX v2 GM pools (Arbitrum) and Hyperliquid HLP, routed through LI.FI. |
| Pre-sign checks | Live | Every plan fails closed unless approvals are capped (never unlimited) and routed swaps meet a minimum received within 1% slippage; a batch that fails Tenderly simulation is rejected. HyperCore follow-up steps are not simulated. |
| Wallet signing | Live | EIP-5792/7702 wallets sign one atomic batch; other wallets sign step by step. Privy wallets also sign an EIP-712 intent bound to the batch. |
| Protocol adapters | Live | Morpho, GMX v2, Hyperliquid and LI.FI adapters only encode actions that are already decided; they never choose a strategy. |
| No Zap Pilot vault | Live | There is no Zap Pilot vault or custody contract. The venues themselves are pooled third-party protocols with their own risks. |
| Device agent key | Live | Hyperliquid deposits use an agent key created and stored on your device (browser storage on the web). You approve it once, and that approval may not expire. |
| Open source | Live | MIT-licensed code and a public reference-strategy spec. |
| On-chain rule check | Research | Version 1’s cross-down exit rule is compiled to Vyper on Arbitrum Sepolia with a pinned runtime codehash, so a recorded exit can be recomputed. |
| Withdrawals | In development | A withdrawal planning endpoint exists on the server; the app does not offer withdrawals yet. |
| Mac drift check | In development | A Mac app that checks for drift every six hours and notifies you. It asks the hosted engine for the decision, never signs, and is not available to download yet. |
| Snapshot chain | In development | Daily IPFS snapshots linked into a chain. They are unsigned and track a single reference address. |
| Rebalance plans | Planned | Turn the gap between a strategy target and your positions into transactions you review and sign. |
| Strategy versioning | Planned | Versioned strategy configs you can hold fixed. Today the config is global and can change in place. |
| Strategy lab | Planned | Write your own rules and backtest them against DCA Classic. |
| Policy engine | Planned | Limits, allowlists and a kill switch you set, checked before anything is signed. |
| Local runtime | Planned | Strategy evaluation and planning on hardware you control. |
| Unattended runs | Planned | Rebalancing without you, only inside scoped on-chain permissions you can revoke. |
| Tokenized S&P 500 | Planned | An adapter for the S&P 500 sleeve the reference strategy models. Deposits keep it at 0% until one exists. |
| Strategy publishing | Planned | Publish a strategy with a verifiable track record. |
| AI exception layer | Planned | An optional model that handles exceptions inside limits you set. No model decides allocations. |
Principles
Live There is no Zap Pilot vault or custody contract. The venues themselves are pooled third-party protocols with their own risks.
Live Every plan fails closed unless approvals are capped (never unlimited) and routed swaps meet a minimum received within 1% slippage; a batch that fails Tenderly simulation is rejected. HyperCore follow-up steps are not simulated.
Live Hyperliquid deposits use an agent key created and stored on your device (browser storage on the web). You approve it once, and that approval may not expire.
Planned Strategy evaluation and planning on hardware you control.
Planned Rebalancing without you, only inside scoped on-chain permissions you can revoke.
Hypothetical backtest: it fills each trade the day after its signal, assumes a yield on stablecoin balances only, and includes an S&P 500 sleeve Zap Pilot can't execute yet. Past performance does not guarantee future results. Backtest window: 2025-05-29 to 2026-10-10, as of 2026-10-10.
Alternatives
S&P 500: Broad US exposure, with no rules of your own. S&P Dow Jones Indices
DeFi Saver: Automates lending positions inside its own app. DeFi Saver
Where to go next
Each day it reads the market, runs an open-source reference strategy, and shows where every step stands. How the runtime works
The strategy and its backtest are separate from live execution. Reference strategy
Read the system and third-party trust boundaries. Architecture