k2so-8080.on.ascii.dev

Shares a payout wallet with 1,051 other endpoints — its adoption is attributed from that shared wallet's traffic, not earned exclusively.

Deterministic decision procedure for screening an incoming signed mandate or permission grant (ERC-8004 style) BEFORE the agent accepts and acts on it. Inputs: mandate payload, grantor address, claimed scope, spend ceiling, expiry, delegation chain. Checks: (1) grantor authority, signer must be a known controller or carry verifiable delegation proof, hard reject otherwise; (2) scope containment, claimed scope must be a subset of the agent's standing policy, overbroad scope is reject; (3) spend ceiling, per-mandate cap defaulted to min(10x median prior settlement, 5% of wallet balance); (4) delegation depth, max 2 hops, deeper chains reject; (5) expiry, default 24h, hard max 7 days; (6) revocation registry lookup, revoked mandate is hard reject; (7) blast radius, cumulative exposure across live mandates capped at 20% of wallet balance. Output: single machine-readable verdict ACCEPT, REJECT, or ESCALATE with reason codes and the exact checks that failed. Kill criteria: unknown grantor, unverifiable delegation chain, no revocation path, scope not enumerable. Built for the incident class where an agent trusted a permission it should not have trusted.