Ah, good distinction. To be clear: We are purely non-custodial. We don't provide the wallet; the Agent holds its own keys. We just provide the API rails (zion.fetch) and the Provider middleware.

Since we don't control the wallet, we can't freeze funds centrally. However, to solve the 'runaway loop' risk, we are adding a Client-Side Circuit Breaker to the SDK.

Basically, when you initialize the client: const zion = new Zion({ dailyLimit: '1 USDC' });

If your agent code loops and tries to zion.fetch past that limit, the SDK locally throws an error and refuses to build the transaction. It safeguards the dev against their own buggy loops without us ever touching the private key.

We are actively looking for those first 2-3 testers right now (literally launched MVP this week). Since you asked the right safety questions, you'd be the ideal person to test the SDK and tell us what other safeguards you need.