Proof-carrying authorization for agent purchases

Prove what the agent bought, why it paid, and what arrived.

AgentPayOS binds a human mandate, deterministic policy decision, Solana payment, and delivered result into one portable receipt. Keep your wallet provider. Add evidence it cannot produce alone.

4bound proofs
<1slocal policy check
Devnetproof receipts
INTENT / 0x7A91 POLICY LIVE
Agent request

Purchase a verified market-risk report for $4.50 and bind the delivered result.

Task mandatePASS
Provider allowlistPASS
Spend ceilingPASS
Delivery requiredPASS
READY - mandate 84c1... / task 7a91...
The control plane

One receipt from mandate to delivery.

Wallet limits show that a key was allowed to spend. AgentPayOS proves that the payment matched an approved task and binds the delivered output to the same evidence chain.

Mandate compiler

Convert operating limits into deterministic JSON policy an agent cannot reinterpret.

HUMAN INTENT -> POLICY

Transaction lens

Decode programs, token movement, signer changes, and side effects before signing.

RAW BYTES -> EXPLAINED ACTION

Proof receipt

Hash the policy and decision, then anchor a compact receipt on Solana devnet.

DECISION -> PUBLIC EVIDENCE
Deterministic by design

No missing link between request, payment, and result.

The model may explain and recommend. It never grants authority. Authority comes from signed policy and fixed validation.

01 / COMPILE

Define the mandate

Set program allowlists, value ceilings, destinations, slippage, cadence, and stops.

02 / INSPECT

Decode the intent

Turn an opaque transaction into a readable action graph.

03 / SIMULATE

Measure the outcome

Compare balance changes and behavior against every active rule.

04 / ATTEST

Bind the delivery

Attach the settlement signature and delivered-result hash to a portable receipt.

Built for operators

Evidence finance, security, and engineering can share.

Every approval records the mandate, exact rule result, Solana settlement, and delivery digest under one stable receipt identifier.

Default deny

Unknown programs stop at the rail instead of inheriting wallet access.

Wallet-neutral proof

Use AgentPayOS with Crossmint, AgentKit, Squads, or a custom signer without moving custody.

Portable policy

Versioned JSON makes rules reviewable, diffable, and embeddable.

Give your agent room to work, not room to improvise.

Open policy studio