HelloNear Trust CenterHow HelloNear protects user data and funds, with a reference for each control that can be checked independently.
HelloNear gives a person an AI agent that can pay, so the limits that matter sit outside the model: the owner approves, the wallet's policy is checked in a TEE before signing, and every reply carries a proof from NEAR AI Cloud's TEE. This Trust Center lists what is protected, how it is protected, and where each claim can be verified.
What each part of HelloNear is covered by. Every "Yes" links to its proof. "N/A" means the control does not apply to that part.
| Scope | TEE-verified | Policy enforced before signing | Source verified (NEP-330, SourceScan) | Source public | Testnet only |
|---|---|---|---|---|---|
| Chat inference (NEAR AI Cloud) | Yes | N/A | N/A | Yes | N/A |
| Mind wallet (OutLayer) | N/A | Yes | N/A | Yes | Yes |
| Mind registry contract | N/A | N/A | Yes | Yes | Yes |
| Swarm auction contract | N/A | N/A | Yes | Yes | Yes |
| Hosted demo (app and API) | N/A | N/A | N/A | Yes | Yes |
Chat inference (NEAR AI Cloud)
Mind wallet (OutLayer)
Mind registry contract
Swarm auction contract
"Source public" means the code is published to be read and run locally; the license is all rights reserved, not an open-source license (LICENSE). The hosted API names the commit it runs at api.hellonear.xyz/v1/health (revision).
HelloNear holds no compliance certification. These are the controls that exist in the code, each with where to check it.
Nothing is paid until the owner approves, in the app or in Telegram, unless the owner turned on a rule for small payments to listed addresses. See Wallet, limits and approvals.
Per-payment limit, daily limit and allowed addresses are stored on NEAR and checked by OutLayer in a TEE before signing. A refused payment has no transaction. Policy tx.
The owner signs one transaction and every later payment ends wallet_frozen. Freeze tx.
Each reply's signature is checked against NEAR AI Cloud's TEE attestation before the badge shows, and the proof opens on Phala's TEE Explorer. See Verified replies.
API keys are encrypted with AES-256-GCM and filled in only by the tool, for the hosts the owner listed. A test scans every table for them. See Connections and keys.
Both contracts were built reproducibly and verified through SourceScan, so anyone can rebuild them and compare the code hash. See Receipts and smart contracts.
status.hellonear.xyz checks HelloNear and its providers every 5 minutes. It was built after two outages from outside HelloNear's code in one night: NEAR AI embeddings hung, and NEAR Intents 1Click quotes timed out. Minds now say plainly when a provider is down and point to the status page.
Read updateauction.hellonear-swarm.testnet was built reproducibly from commit 64c9278 and verified through SourceScan (code hash 6Wn9K6b3DtoH4TnoXs2jx6zFzihdzFDQGw4ae2dzcCv1). The 9 findings of the 13 Nov review were fixed before it was deployed, and round 0 ran on testnet. See Swarm auction.
Read updateA NEP-366 relayer pays the gas for owners' unequip_skill and set_wallet calls to the registry, never a deposit, and refuses a bad request before sending it. See Gas relayer.
Read update