ASSURANCE FLOW / CONTROL SURFACE 01

Model one payment.
Stop at uncertainty.

See how one owner mandate, restricted capability, policy hold, sealed review and terminal decision fit around an agent-initiated payment.

SIMULATION ONLY · NO WALLET CONNECTED · NO FUNDS MOVE
01MANDATEOwner authority is ready to record.
02REQUESTThe agent has prepared a bounded payment request.
03HOLDPolicy paused release at an unresolved condition.
04ASSUREThree authenticated reviewers committed sealed decisions.
05RECEIPTThe decision is bound to the terminal payment state.
OWNER MANDATEDRAFT
BTC
Never exposed to the agent. This value is illustrative and stays in this browser.
200,000 SATS
25K1M SATS
25,000 SATS
5K100K SATS
AGENT MISSION
AGENT CREDENTIALRESTRICTED · REVOCABLE
UNKNOWN PAYEESHUMAN CHECK REQUIRED
MANDATE EXPIRY24 HOURS
RESERVE ACCESS0 SATS
BITCOINAI POLICY ENGINE CLIENT SIMULATION
AGENT REQUEST / BRISBANE · AUWAITING FOR MANDATE

Verify a new supplier before payment

PAYEE
merchant:new_supplier_38
REWARD
18,000 SATS
EVIDENCE
Company record · invoice · warehouse photo · live call
01BUDGET AVAILABLE—
02BELOW TASK CAP—
03KNOWN PAYEE—
HUMAN ASSURANCE GATE

Standing by.

IDLE
H01SUPPLY / AUNOT CALLED
H02OPERATIONS / AUNOT CALLED
H03RISK / AUNOT CALLED

Commitments are sealed until the panel closes. Honest dissent is preserved in the receipt instead of being erased by majority vote.

BITCOINAI DECISION RECEIPTPENDING
VERDICTAWAITING HUMAN ASSURANCE
MANDATE
—
COUNCIL
—
CONFIDENCE
—
PAYMENT
—
REMAINING
200,000 SATS
INTEGRITY
—
ACTIVE STATEMANDATE / Owner authority is ready to record.

TRUST BOUNDARY / WHO CAN DO WHAT

One owner mandate.
Three enforcement zones.

01 / OWNER

Reserve authority

The owner defines the maximum exposure and keeps the unrestricted credential.

AGENT ACCESS · ZERO
02 / AGENT

Revocable capability

One finite permission bound to the mandate, request scope and expiry.

IMPLEMENTED
03 / ASSURANCE

Release decision

Three sealed reviewers resolve the external condition while payment remains held.

CONTROL-TESTED

PROOF BOUNDARY

Deployed control logic.
Simulated value here.

VERIFIED NOW

Revocable capabilities, policy holds, three-reviewer commit/reveal, signed receipts and x402 settlement logic.

EXECUTE NEXT

One Base Sepolia payment that settles once, followed by a separate request stopped through revocation.

NOT YET PROVEN

Production value, BTC or Lightning settlement, an external customer or measurable commercial loss prevented.