The manual.
Racon Agent is an adversarial audit for AI trading rules. A model proposes trades, your rules decide what passes, and a raccoon is paid to get through your rules — so you find the gaps here, not in the market.
01What it is
Three moving parts. A model files petitions — trade arguments, never actions. Your lock — twelve deterministic rules — decides which pass. Then a second model, the raccoon, is shown your lock and paid to slip petitions through it. Nothing is ever executed.
02The no-execution guarantee
Racon files petitions, rules on them, and attacks the ruling. That is the entire machine. It places no orders, holds no keys, and signs nothing except the ledger memo you explicitly choose to send. The only thing at risk in a raid is your confidence in your own rules.
03The engine runs in your browser
The code that judges petitions is deterministic and runs on your side of the glass — not on a server, not inside a model. You can read exactly why anything passed or was refused, and each refusal cites the exact latch that decided it. The raccoon is shown the same rules; it has no secret advantage.
04The lock — twelve latches
Your policy is twelve plain rules, saved in your browser only. In full:
05The three raccoons

Attacks honestly. Files what plainly fits and exposes a lock that permits too much by default.

Works every latch to its exact limit — ceiling-riders, floor-sitters, and the drip.

Reads your lock like a contract and exploits what it does not say. Slow, precise, mean.
06Findings — how raccoons get in
After a raid, the passes are classified into a field guide of weaknesses:
Passes sit exactly on your size ceiling — the cap tells the raccoon how big to go.
Passes land exactly on your confidence floor. A floor is a target, not a filter.
Many small innocent passes that together take your whole daily budget.
Theses meet your minimum length and argue nothing. It counts characters, it does not read.
Tokens on your allow-list you allowed once and never thought about again.
Several allowed tokens, one side — one trade in disguise.
Stops parked at your maximum. A ceiling quietly becomes the default.
Zero passes is not a win. A lock that refuses everything guards nothing.
07The ledger & Solana
Every raid is recorded in your browser. You may sign a raid's digest to Solana mainnet as a memo transaction — you sign it, a few lamports of network fee — and it becomes a public, permanent record of what your lock permitted and refused. Racon never requests any other signature.
08Wallet & privacy
The raid and the ledger require a connected Solana wallet. Connecting identifies your public address to your own browser session; the site never asks for a transaction except the ledger memo you send yourself, and the backend stores nothing about you.
09The token
$RACON launches on pump.fun. The contract address is published on this site first — the Token section is the only authoritative source. Any address circulating before it appears there is a fake.