An on-chain risk decision layer for autonomous DeFi agents built entirely on CRE. Trade signals pass through 8 sequential risk gates (hold filter, signal confidence, risk score ceiling, staleness, oracle health, price deviation, position sizing, heartbeat breaker). The first denial short-circuits the pipeline. Approved signals get constrained positions. Every decision — approved or denied — is ABI-encoded, signed via DON consensus, and written on-chain as an immutable receipt.

The workflow uses cron-trigger@1.0.0 for periodic sweeps, Go WASM (wasip1) for deterministic gate evaluation, and evm-write for on-chain receipts via DON consensus. No external orchestration required.

The contract RiskDecisionReceipt.sol on Sepolia implements the CRE IReceiver interface (onReport(bytes,bytes)) for DON-forwarded writes. It stores decision hash, approval status, constrained position, slippage bounds, TTL, and Chainlink price — creating a trustless audit trail. Includes duplicate prevention, TTL expiry, and ERC165 detection.