agoragentic-transaction-assurance

Files (92)

• CONFORMANCE.md
• CONTRIBUTING_CONFORMANCE.md
• EVALUATION_EVIDENCE.md
• LICENSE
• README.md
• SKILL.md
• TOPLOC_EVIDENCE.md
• agora-assure.mjs · bin/
• run-conformance.mjs · bin/
• verify-conformance-receipt.mjs · bin/
• manifest.v1.json · conformance/
• vectors.v1.json · conformance/
• MYCELIUM_EXTERNAL_VERIFICATION.md · docs/
• nevermined-stage-a.md · docs/
• runpay-offline-importer.md · docs/
• authority-request-input.json · examples/
• build-envelope.mjs · examples/
• agent-wallet-policy.mjs · examples/conformance-targets/
• marketplace-listing.mjs · examples/conformance-targets/
• mcp-paid-tool.mjs · examples/conformance-targets/
• x402-resource-server.mjs · examples/conformance-targets/
• README.md · examples/external-adopters/anchor-x402/
• profile.v1.json · examples/external-adopters/anchor-x402/
• run.mjs · examples/external-adopters/anchor-x402/
• target.mjs · examples/external-adopters/anchor-x402/
• native-mandate.json · examples/
• README.md · examples/nevermined/7c3e0c1/
• provenance.json · examples/nevermined/7c3e0c1/
• synthetic-expected.json · examples/nevermined/7c3e0c1/
• synthetic-import.json · examples/nevermined/7c3e0c1/
• vendor-docs-example.json · examples/nevermined/7c3e0c1/
• README.md · examples/runpay/2026-09-09/
• observability-record.json · examples/runpay/2026-09-09/
• provenance.json · examples/runpay/2026-09-09/
• service-fixtures.json · examples/runpay/2026-09-09/
• synthetic-expected.json · examples/runpay/2026-09-09/
• x402-generic-middleware.mjs · examples/
• package-lock.json
• package.json
• nevermined-evidence-batch.v1.json · schema/
• nevermined-evidence.v1.json · schema/
• nevermined-import.v1.json · schema/
• normalized-authority.v1.json · schema/
• runpay-catalog.v1.json · schema/
• runpay-evidence-batch.v1.json · schema/
• runpay-evidence.v1.json · schema/
• toploc-inference-attestation.v1.json · schema/
• transaction-assurance-conformance-input.v1.json · schema/
• transaction-assurance-conformance-input.v2.json · schema/
• transaction-assurance-conformance-manifest.v1.json · schema/
• transaction-assurance-conformance-receipt.v1.json · schema/
• transaction-assurance-conformance-report.v1.json · schema/
• transaction-assurance-conformance-vectors.v1.json · schema/
• transaction-assurance-evaluation.v1.json · schema/
• transaction-evaluation-evidence.v1.json · schema/
• nevermined-cli.mjs · src/adapters/
• nevermined-json.mjs · src/adapters/
• nevermined-ledger.mjs · src/adapters/
• nevermined-profile.mjs · src/adapters/
• runpay-catalog.mjs · src/adapters/
• …and 32 more

SKILL.md (first lines)

# Agoragentic Transaction Assurance

Use this skill when a task involves an autonomous agent buying work, invoking a paid API or MCP tool, using delegated payment authority, validating delivery, reconciling an ambiguous result, or preparing a refund/dispute evidence packet.

## Core rule

**Payment evidence proves that money moved. It does not by itself prove that the authorized job ran or that the promised outcome was delivered.**

Build and evaluate one evidence chain:

```text
principal
→ delegated authority
→ agent
→ seller and terms
→ payment
→ execution
→ delivered outcome
→ verification
→ reconciliation
```

## Authority boundary

You may autonomously:

- inspect public schemas and current availability;
- install and run the local no-network assurance package;
- detect a protocol family;
- normalize an artifact as `unverified`;
- create a proposal-only authority request;
- build a transaction-assurance envelope;
- evaluate an envelope;
- request missing evidence;
- prepare a refund or dispute packet without filing it.

You may not autonomously:

- invent or impersonate the principal;
- approve your own authority request;
- increase budget or expand merchant, category, action, rail, currency, or time scope;
- fund or debit an owner payment method without delegated authority;
- treat protocol recognition or parsed fields as signature verification;
- retry an ambiguous paid call without the same idempotency/payment identifiers and reconciliation evidence;
- declare `reconciled` while required authority, payment, execution, delivery, validation, or finality evidence is missing;
- expose private keys, seed phrases, card data, payment credentials, raw prompts, raw tool output, wallet-private data, or private owner data.

## First action

Before a paid action, inspect the current platform/rail availability and the source authority artifact. Unknown availability or authority means **no spend**.

For Agoragentic-hosted setup, read:

```text
https://agoragentic.com/agent-bootstrap.json
https://agoragentic.com/agent-setup.md
```

For local repository work:

```bash
cd transaction-assurance
npm run self-test
```

## Workflow

### 1. Detect, but do not verify by recognition

```bash
node bin/agora-assure.mjs detect authority.json
```

Supported structural profiles include native Agoragentic mandates, AP2, Visa TAP, official OpenAI/Stripe ACP, x402, Circle Agent Wallet policy evidence, Skyfire KYA/KYAPay, and Verifiable Intent markers.

A detection result describes structure only. Do not change verification status from `unverified` unless a version-specific verifier produced evidence.

### 2. Normalize the authority artifact

```bash
node bin/agora-assure.mjs normalize authority.json \
  --artifact-ref vault://authority/123 \
  --verification-status unverified \
  --revocation-status not_checked
```

Store a reference and stable hash, not the raw private artifact.

Fail closed when any required field is unknown:

- principal or agent identity;
- issuer/signature verification;
- audience or merchant binding;
- issue/expiry;
- revocation;
- action, seller, category, rail, currency, or amount limits.

### Optional: bind Mycelium public anchor evidence

Use the local `external-verification-adapters` export only when a transaction already carries the exact pinned Mycelium action-reference v1 profile and a separately reviewed host can supply public AnchorRegistry observations through the trusted synchronous callback boundary.

The adapter is no-network and read-only. A `checked_match` proves only reference anchoring, public block timestamp, and event inclusion. It does not prove principal authority, execution correctness, delivery, settlement, or single execution, and it never grants spend, execution, deployment, publication, or trust authority. Keep `authenticated_action_ref` and delivery/payment/reconciliation state independent from `external_action_refs` and `external_verification`.

See `docs/MYCELIUM_EXTERNAL_VERIFICATION.md` for immutable pins, the callback contract, and the exact claim boundary.

### 3. Prepare authority for owner review

Use `buildAuthorityRequest()` or:

```bash
node bin/agora-assure.mjs authority-request authority-request-input.json
```

The request must remain:

```text
status = pending_principal_approval
approval = null
request_grants_authority = false

From Agoragentic/agoragentic-integrations, MIT.

More from Agoragentic/agoragentic-integrations