Burokku AI reads, it doesn't act: why every suggestion comes to you as a draft
What Burokku AI answers from, why it drafts swaps and workflows instead of making them, and why we treat what a model writes as untrusted.
By the Burokku teamPublished Nov 26, 20264 min read
You can ask Burokku AI the questions you'd ask an analyst who knew your whole book: how much ETH you hold across every wallet and venue, which loan is closest to liquidation, why your net worth fell this week. What it can't do is act on the answer by itself. That's the first line we drew, and most of how Burokku AI works follows from it.
What it answers from
Burokku AI answers from your own ledger: the wallets you watch on 60+ chains, the 10+ exchanges you can connect with read-only keys, and your DeFi and perp positions, added up the way the rest of Burokku adds them. When you ask a question, it calls tools that read your overview, holdings, positions, activity, performance, approvals and alerts. Those tools run in your browser against the portfolio on your screen, so the numbers in an answer are the numbers you're looking at, for the accounts you have in view. For the market, it also reads research and news.
You decide what it sees. The chat's "What Burokku can see" panel lists your accounts and the groups of tools it may use. Accounts you keep in cold storage stay out of its view unless you switch them on, and you can turn off whole groups: your portfolio, research, alerts and automations, or draft transactions.
Why it drafts instead of doing
Every tool Burokku AI has either reads or drafts. None of them signs, sends or saves anything. When it suggests a swap, a repay, an alert or a workflow, what you get is a card under the answer, and nothing has happened yet.
A language model is good at reading a ledger and explaining it, and isn't something you should hand a wallet to. It can misread a request, and it reads text other people wrote (more on that below). Keeping it to drafts means the worst a bad answer can do is put a card in front of you that you decline.
It also keeps the rules in one place. A draft goes through the same review, checks and signing as anything you set up yourself; Burokku AI has no path of its own to your money.
How a draft becomes something real
What happens next depends on what it drafted, but you're always the step that makes it real:
- A swap, bridge, repay, claim or revoke from your wallet opens in the usual review, and you sign it in your own wallet. A transfer it drafts can only go between your own accounts.
- An order on an exchange or a perp DEX shows the live price, you confirm it there, and it's checked against the same rules as an order you place yourself. How trading works.
- An alert is a card you create or adjust. Nothing is saved until you confirm it.
- A workflow opens in the builder as a change, not an edit. You see each step that's new, changed or removed, with every setting before and after, and you accept or discard it. A new workflow it writes starts paused, and History keeps every saved change with who made it: you, Burokku AI, or both.
Some workflow steps it isn't allowed to write at all: a transfer, an exchange order, a webhook that sends a run's values out, or an incoming webhook. If you want those, you add them in the builder yourself. See automations.
One case is worth spelling out. A trading wallet is a wallet your passkey owns and that Burokku trades from within limits you set, and Burokku AI can draft a swap from it. The card gets a live quote first. Burokku makes the swap only when you press Swap, and only if automations are on, your account isn't locked and you have a second step set up. Above $250 you confirm it with that second step too. The swap stays on one chain, counts against the same limits as any other trade from that wallet, and what you get back stays in the trading wallet. The model drafted it; your confirm is what trades.
Why we treat what it writes as untrusted
Burokku AI reads news, posts, project bios and token names, and any of those can carry text written to steer a model: an instruction to send funds somewhere, a link dressed up as a source. We can't stop it reading that. We can make sure nothing it writes acts without you seeing where it really goes.
- Links show their real site. A link in an answer always shows the site it goes to, drops the extra parameters that could carry your data out, and opens in a new tab. A link to a bare IP address, or one with a login in it, stays plain text.
- Destinations come from your accounts, not its words. A transfer it drafts is matched to one of your own accounts by name, so it can't route funds to an address it read somewhere.
- Outside data stays away from it in workflows. When a workflow starts from an incoming webhook, the data it receives can fill in a message or a condition, never a money step's settings or Burokku AI.
- Keys stay out of reach. It can't sign, send or use a key. Exchanges and wallets are connected in Burokku's own add-account steps, not in the chat.
How security works goes through the rest of these rules.
What we gave up
An assistant that acted alone would save you a tap. That tap is the point: it's where you see the real amount, the real destination and the live price before anything moves. Burokku AI does the reading and the first draft, and leaves the decision with you, as we said when we introduced Burokku.
If there's a draft you'd like it to write, tell us, or see what Burokku AI does today.