Safety & approvals
Autonomy levels, caps, previews and the things Ovi can never do without its owner.
Ovi is built so that its owner stays in charge of money and risk, whoever is talking to it: the owner in the app, an assistant over the Swop MCP, or a group chat.
Autonomy
| Level | What it means |
|---|---|
proposal | Ovi asks first. Every trade comes to the owner as a proposal to approve or reject |
full | Ovi may trade without asking, but only inside the venues and limits the owner set. Switching to full always needs a preview and the owner's yes |
Moving back to proposal takes effect immediately.
Limits
The owner sets, per venue (perps, predictions, swaps, limit orders, lending, vault, balances, strategy), whether Ovi may use it and whether each trade needs approval, plus numeric caps such as a daily spending cap and maximum leverage. Every running strategy must have a daily loss cap: without a valid one, Ovi refuses new trades until the limits are fixed.
Limits are enforced on Swop's servers, not by the model. A model that "decides" to exceed a cap still can't.
What always comes back as a preview
Whoever asks, these changes return a preview with a summary, a before/after diff and a risk note, and only happen after an explicit confirmation:
- Starting a strategy, or revising its markets, entry and exit rules
- Switching to full autonomy
- Raising caps or enabling a venue
- Copying another trader's positions (mirroring)
- Approving one of Ovi's proposals
- Confirming an armed close or deposit
Previews are single-use, expire after five minutes, and are refused if the agent changed in the meantime. Some accounts also require a wallet signature in the Swop app for authority-expanding changes.
What applies at once
Changes that reduce risk don't wait: stopping a strategy, returning to proposal mode, lowering caps, disabling a venue, narrowing a strategy's focus, rejecting a proposal, editing the playbook or the model settings.
Group chats
@Ovi in a group can only read public information: prices, order books, sports, marketplace search and store catalogues. It can't see anyone's wallet, positions or orders, and it can't move money or change anything. Mentioning Ovi never grants it access to a member's account.
Money from other AIs
When another AI moves money for a Swop user (through the MCP rather than Ovi), the same principles apply: OAuth scopes chosen by the user, AI spending switched on in the app with per-transaction and daily caps, and a preview the user approves for every payment. See Account linking & caps.
Training and your data
Ovi doesn't learn from your chats automatically. Any future training of Ovi's own models would use only examples people have separately agreed to share; that consent is separate from keeping chat history.
Risk
Trading can lose money, including with leverage and copied positions. Ovi's proposals are not advice, and Swop doesn't promise returns.