Praxis Puts Spending Limits and a Dry-Run Gate in Front of AI Agents on Sui

Praxis is a Testnet security layer that sits between an AI agent and a Sui wallet. Before an agent can move funds, Praxis dry-runs the payment, checks it against spending rules the owner set, and records why the spend was allowed or blocked — including blocked attempts.

The project won fourth place in the Walrus track at Sui Overflow 2026, according to the official Sui winners announcement. Its public app and documentation are live at praxis.allensaji.dev. The open-source repository states that hosted execution currently supports Sui Testnet SUI transfers only; mainnet, other coins and arbitrary contract calls are not enabled.

What it does in plain English

Think of Praxis as a brake pedal for software that can spend money. A wallet can check that a signature is valid. Praxis adds a second check: whether the agent's requested payment fits limits the owner already approved, and whether a simulation of the transfer looks safe.

According to Praxis's site and README, an owner funds a shared vault and authorizes one or more agents with individual limits — recipients, per-payment caps, daily and monthly budgets, total allowance and expiry. Agents request payments through a scoped HTTP credential. The owner approves on-chain permissions; a separate delegate signer executes payments inside those permissions. The agent never receives the owner's private key.

Before funds move, Praxis says it simulates the transfer, scores risk with a built-in ruleset, and can abort the request. Decisions — approvals and interventions — are written to a Walrus audit trail with a tamper-evident on-chain receipt, per the Overflow write-up and the project's own docs. Hosted reasoning on the public deployment is described as public; the README warns never to put secrets in reasoning text.

Current scope and caveats

Praxis is not a finished mainnet payments product. Its README is explicit: hosted execution is Testnet SUI only, simulation checks current state and is not a guarantee of later success, and mainnet readiness still needs independent security review, upgrade-authority policy, signer recovery and operational alerting. A DeepQA team run dated September 27, 2026 tested the site on Sui Testnet and reported seven of eight scenarios passed, with one failure and one low UX issue — useful early evidence, not a formal audit.

On X, builder Allen Saji (@SajiBhai011) announced the Walrus-track placement on August 27, said he was continuing work toward mainnet on September 1, and on October 4 said he would demo Praxis at Sui Basecamp in Singapore. SuiWire did not independently verify a Basecamp agenda listing for that demo. There is no dedicated Praxis project account on X at publication time.

Why it matters

Sui's recent public messaging has focused on agents that spend inside limits with records that are hard to quietly rewrite. Praxis is one Overflow winner aimed at that gap: it tries to stop a bad agent payment before the wallet signs, and keep a durable explanation afterward. SuiWire will update this story if Praxis publishes a mainnet release, an independent audit or a change in supported assets.