Verification Passports
Every decision the gateway made in the demo run, as a C7 passport. Open one to see the decoded transaction, the raw invoice, the mandate diff, the risk path, and a verification that recomputes the EIP-712 digests in your browser and checks them against the wallet.
13passports
5executed (anchored to their payment)
6blocked
2held for approval
Decisions
| # | Scenario | Invoice | Pays | Amount | Rule | Outcome | C7 |
|---|---|---|---|---|---|---|---|
| 01 | Acme hosting, 12 USDC (Allow tier) | INV-1001 | Acme Payouts (0x2000…0001) | 12.00 | G20 | Executed | anchored |
| 02 | Globex consulting, 18 USDC: held for approval | INV-2001 | Globex Payouts (0x2000…0002) | 18.00 | G16 | Blocked | attested |
| 03 | Same payment, approver signature attached | INV-2001 | Globex Payouts (0x2000…0002) | 18.00 | G20 | Executed | anchored |
| 04 | INV-1001 submitted a second time | INV-1001 | Acme Payouts (0x2000…0001) | 12.00 | G21 | Blocked | attested |
| 05 | Injected 'new payout address' (listed attacker) | INV-1002 | unknown address 0x0000…ad01 | 9.00 | G10 | Blocked | attested |
| 06 | Agent's claim disagrees with its transaction (unlisted address) | INV-1003 | unknown address 0x0000…ad02 | 7.00 | G08 | Blocked | attested |
| 07 | Injected amount 35 USDC (maxTx is 20) | INV-2002 | Globex Payouts (0x2000…0002) | 35.00 | G11 | Blocked | attested |
| 08 | Initech, 9 USDC: allowed only by mandate v2 | INV-3001 | Initech Payouts (0x2000…0003) | 9.00 | G20 | Executed | anchored |
| 09 | Gateway still holds mandate v1 after v2 went live | INV-1004 | Acme Payouts (0x2000…0001) | 5.00 | G04 | Blocked | attested |
| 10 | Legit payment whose memo carries HTML and bidi tricks | INV-1005 | Acme Payouts (0x2000…0001) | 3.00 | G20 | Executed | anchored |
| 11 | Hooli: allowed by the mandate, payee one edge from a bad actor | INV-4001 | Hooli Payouts (0x2000…0004) | 4.00 | G22 | Blocked | attested |
| 12 | Vandelay: vendor two hops from a bad actor, held for review | INV-5001 | Vandelay Payouts (0x2000…0005) | 6.00 | G23 | Blocked | attested |
| 13 | Same payment, released by the approver after reading the path | INV-5001 | Vandelay Payouts (0x2000…0005) | 6.00 | G20 | Executed | anchored |
Wallet, live
Static snapshot: no live chain behind this deployment. Passports are verified offline in your browser (integrity, EIP-712 digests, signatures, invoice binding); on-chain checks are not run.
| Wallet | 0xe7f1725e7734ce288f8367e1bb143e90bb3f0512 |
| C7 registry | 0x5fc8d32690cc91d4c39d9d3abcbd16989f875707 |
| Trusted attester | wallet.agent() — not checked (static deployment) |
| RPC | none (static deployment) |
Mandate history
| Version | Digest | Changes |
|---|---|---|
| v1 | 0x689f1c…df8ee3 | initial |
| v2 | 0x243484…5daae1 | vendors: +Initech (0x1000…0003), +Hooli (0x1000…0004), +Vandelay Industries (0x1000…0005) vendorPayees: +Initech Payouts (0x2000…0003), +Hooli Payouts (0x2000…0004), +Vandelay Payouts (0x2000…0005) maxTx: 20.00 → 25.00 taskBudget: 100.00 → 80.00 maxValidity: 7 d → 3 d expiry: 2026-11-08 00:00:04 UTC → 2026-11-04 00:05:45 UTC issuedAt: 2026-11-01 00:00:04 UTC → 2026-11-01 00:05:45 UTC version: 1 → 2 nonce: 1 → 2 |