Not claimed.
One overclaim and the record is worthless. So here is what we don't say.
Starting…
- Guaranteed wins
- Deciding disputes
- Touching the money
- Covering agents that don't sign
- A liability shift
- Bank authentication
- A live bank channel
- That what was recorded is true
- What the customer meant
- What arrived
The checks show two things: the record hasn't changed since it was sealed, and which recorded keys signed it. Not who held the device, and not the dispute's outcome.
What stays the same.
- Her rightsApproving changes none of her refund or dispute rights. Her bank still decides.
- Her bank's checksOur approval is not 3-D Secure or the bank's own authentication, and moves no fraud liability.
- Unsigned checkoutsThe gate only holds checkouts with a supported agent signature. Everything else, including agents that don't sign, follows your normal checkout.
- Pending chargesAfter a decline, the payment provider is asked to release the hold. Her bank decides when the pending charge disappears.
- Who approvedA first approval shows control of the contact and the new passkey, not ownership of the card. Tying the approver to the cardholder is still to be designed.
Who signs what.
- AgentSigns its checkout request. Not what the customer asked it to do.
- BusinessSigns the booking as the agent was shown it. Not what the agent showed the customer.
- CustomerApproves the exact booking, or signs her rules in advance. Not who was holding the phone.
- Card networkVouches for her instruction, where a supported flow sends one. Not what the agent showed her.
- LedgerRecords when the fingerprint was logged. Not whether the data is accurate.
The samples.
- FictionalEvery business, customer, agent and id.
- RealEvery fingerprint and signature check, run in your browser with keys made on page load.
- SimulatedBank and issuer screens in the demo.