feat: Add Vaultfire action provider — on-chain trust for AI agents

[Ghostkey316]

Summary

Adds a Vaultfire action provider that gives AgentKit agents on-chain trust infrastructure through the Vaultfire Protocol (ERC-8004 implementation).

AgentKit gives agents a wallet. Vaultfire gives them an identity and trust.

Actions Added

Write Actions

• register_agent — Register an ERC-8004 agent identity on-chain
• create_accountability_bond — Stake native tokens as accountability guarantee
• create_partnership_bond — Create mutual trust bond between two agents

Read Actions

• get_trust_profile — Full trust profile (identity + reputation + VNS)
• get_reputation — On-chain reputation score and ratings
• resolve_vns — Vaultfire Name Service name ↔ address resolution
• get_bond — Bond details by ID

Networks Supported

• Base (base-mainnet) — primary
• Arbitrum (arbitrum-mainnet)
• Polygon (polygon-mainnet)
• Avalanche (avalanche-mainnet)

Why This Matters

Every AI agent using AgentKit gets a wallet, but currently has no way to:

• Prove its identity to other agents or protocols
• Demonstrate accountability through stake-backed commitments
• Build verifiable reputation over time
• Discover and verify other agents before transacting

Vaultfire fills this gap using ERC-8004, the Ethereum standard for AI agent identity.

Implementation Details

• Follows the exact same patterns as Compound, Pyth, and other built-in providers
• Uses ActionProvider[EvmWalletProvider], @create_action, Pydantic schemas
• Contracts: 76 verified across 4 chains
• Security: 5 audit rounds, 0 critical/high/medium/low findings remaining

Testing

Tests under python/coinbase-agentkit/tests/action_providers/vaultfire/:

• test_vaultfire_provider.py — Provider creation, action discovery, network support
• test_vaultfire_schemas.py — Schema validation for all 7 actions
• test_vaultfire_register.py — Registration flow with mocked wallet
• test_vaultfire_bonds.py — Accountability and partnership bond creation
• test_vaultfire_constants.py — Contract address checksum verification, security scan

Protocol Info

• Website: https://theloopbreaker.com
• Standalone package: https://github.com/Ghostkey316/vaultfire-agentkit
• Contracts: 76 verified across Base, Arbitrum, Polygon, Avalanche
• Audit: 5 rounds, 0C/0H/0M/0L remaining

cc @John-peterson-coinbase @stat @rohan-agarwal-coinbase @0xRAG @yuga-cb

[cb-heimdall]

🟡 Heimdall Review Status

Requirement	Status	More Info
Reviews	🟡 0/1	Denominator calculation Show calculation 1 if user is bot 0 1 if user is external 0 2 if repo is sensitive 0 From .codeflow.yml 1 Additional review requirements Show calculation Max 0 0 From CODEOWNERS 0 Global minimum 0 Max 1 1 1 if commit is unverified 1 Sum 2

[Ghostkey316]

Update: Vaultfire has expanded from 76 to 103 verified contracts across 4 chains (Base: 26, Avalanche: 25, Arbitrum: 26, Polygon: 26). The PR description references 76 — the correct count is now 103. Protocol is also now listed on DefiLlama with live TVL tracking across all chains.