Your stackstays.
The gate sits in your checkout and works through your payment provider. We never touch the money or card numbers. Nothing is live yet: each piece below says whether it is a working sample, a planned pilot integration, or not integrated.
Starting…
Plugs in.
| Piece | Does | Status |
|---|---|---|
| Agent recognition | Verifies which agent sent the checkout: Visa's Trusted Agent Protocol, or Web Bot Auth as used by Mastercard Agent Pay and by signed ChatGPT agent requests. This says who the agent is, not what the customer allowed. | Working sample, demo keys |
| Customer permission | A separate check on every booking: a supported network instruction, her saved rules, or a new passkey approval, compared with this booking. | Working sample, demo keys |
| Network instructions | Verifiable customer authorization inside a supported card network agent payment, where a network provides it. | Not integrated |
| Checkout gate | Sits in your checkout, signs the booking, and decides: take the payment, ask her, or step aside. | Planned pilot integration |
| Payment provider | Holds the payment at checkout and takes it only after the gate says so. After a decline or 24 hours, it is asked to release the hold. | Planned pilot integration |
| Approval | Passkey approval in her app, or a link to her contact on the order. Verifying that the contact belongs to the cardholder is still to be designed. | Working sample |
| Ledger | Seals the record before the payment is taken, and adds the payment to it afterwards. | Working sample |
| Verification core | Recomputes every digest and checks every signature. | Working sample |
Hands it over.
Record file
- Booking
- #HB-20417
- Found by
- the payment ID
- Contains
- agent, approval, booking, what the agent was shown, payment
- Sealed
- before payment
- Checks run
- 11, every result shown
- Verify
- anyone can, without us
Works todayDownload the record file and verify it yourself.
NextDelivered to banks through Visa and Mastercard's pre-dispute services, and through payment provider APIs.
Building…
Inside the record.
| records | The agent's request, her approval and rules, the booking as the agent was shown it, the hold and the payment |
| ledger, digests | Both entries, every hash |
| checks | Each integrity check and its result |
| compelling_evidence_3 | A Visa CE 3.0 check on sample data. Integrity and eligibility are separate. |
| cannot_prove | The record's limits |
| public_keys | Verify without asking us |