TORINAGI

Everyone needs guardrails, especially your AI.Move money with limits that hold — whether it is you, your team, your software, or an agent doing the spending.

Alpha · we never hold your keys · test money only

Join the waitlist

The problem

Money that moves inside limits you set.You decide how much, how often, and to whom. Then anything acting for your business — a person, a scheduled job, your own software, an AI agent — is held to it. The unusual ones wait for you, and every yes and every no is written down where you can show it.

What that unlocks

And this is why agents suddenly matter.A person can only approve so many payments in a day. Software cannot be trusted without limits. Put the two together and you get the thing neither could do alone: compute bought at 3am, a supplier paid the moment a delivery lands, an API fee settled a thousand times a day — work nobody could sign off one payment at a time. You approve the boundaries once; everything inside them stops needing you.

Where a plain spend cap lets you down

“One payment ate the whole month.”

A monthly allowance is a total, not a ceiling — one payment can spend all of it at once. So we ask two questions instead of one: how much per period, and how much per payment. Your agent is held to both.

“It paid someone I’d never heard of.”

You name who each agent may pay. Anyone else is refused on the spot — not escalated, not queued for review. You already answered that question when you wrote the list.

“Too big to wave through, too small to panic over.”

Payments bigger than routine but smaller than alarming wait for a person — you — instead of being guessed at. Allow and deny are the wrong two answers for the middle.

“Prove what it did — and didn’t do.”

Every refusal is kept with its reason. Screening can tell you a payment looked suspicious; only the record can show your auditor why your agent did not do something.

Two wallets, two jobs

Your own wallet is never spent from.The wallet you already have stays something we show you, not something we spend. Anything acting for you draws on a separate balance you topped up on purpose — so the most it can ever reach is the amount you decided to put there.

Two machined cases: one closed and sealed, one open with gold discs sliding out.
One stays shut. The other is the one anything acting for you can reach — and only for what is inside it.

The wallet you bring

Yours — shown, never spent from

Connect the wallet you already use and we can show you what is in it. Proving it is yours lets us display it and take money from it when you send some. It never becomes permission to spend.

Money only ever leaves it on a transfer you sign yourself.

The wallet you spend from

Yours too — this is the one with the limits on it

Top it up with what you are willing to put to work. Your limits and approvals apply here, and this is the only balance anything acting for you can reach.

Move in $500 and $500 is the most that is ever at stake.

Topping up is a transfer, not a permission. There is no standing access to take back afterwards, because none was given.

The record

Every yes, and every no, with the reason.A payment that went through is easy to show — the bank statement does it for you. The half nobody can produce is the other one: what was asked for, what stopped it, and when. That is the part an auditor asks about, and the part a spend cap has no way to answer.

Do you ever hold my money?

Never, and it is built so we cannot. Torinagi holds no keys and takes custody of nothing. Today this moves test money only — real balances are not switched on yet.

Coming

Torinagi USDA dollar you hold, backed by short-term US Treasuries.

The same limits, approvals and records you already have — applied to a balance that sits in Treasuries rather than idle. We will say who issues it, who holds the reserves and who audits them before we ask anybody to hold a cent of it.

Not available yet. Nothing here is an offer.

A design study. Not a product you can hold.

Give whoever spends for you a budget they cannot break — and keep every receipt.

One email when it opens. Nothing else, and no sales conversation, ever.