Passports / 01-legit-allow
Acme hosting, 12 USDC (Allow tier)
EXECUTED
G20 ALLOW · decision Allow · decided by wallet
Gateway's explanation (attested, not verifiable): ALLOWED. All checks passed and the simulation succeeded. After this payment, spending under the mandate will be 12.00 of 100.00 mUSDC. What the transaction does: pay 12.00 mUSDC from the Interlock wallet to Acme Payouts (0x2000…0001), for invoice "INV-1001" (agent-supplied) from Acme Corp (0x1000…0001). This is at or below the 15.00 mUSDC review threshold, so no approver signature is needed. The payment expires at 2026-11-01 00:30:36 UTC.
| Passport hash | 0x439e80b6e788f804384da7882696d9d34326320e42b541aaca5ecc016906a07c |
| Issued by | 0xbb50b6623454712be08befecb0b78b9ec7d16086 at 2026-11-01 00:00:37 UTC |
| C7 registry | attested + anchored to the payment digest · tx 0x02b4d1…6903b2 · block 9 |
Verification run in your browser, offline (static deployment)
VERIFYING…
Decoded transaction
| Call | execute(Payment, bytes approverSig) |
| To (wallet) | 0xe7f1725e7734ce288f8367e1bb143e90bb3f0512 |
| Value | 0 wei |
| Payment.to | Acme Payouts (0x2000…0001) |
| Payment.amount | 12.00 (12000000 units) |
| Payment.token | 0x5fbdb2315678afecb367f032d93f642f64180aa3 |
| Payment.nonce | 1 (agent range) |
| Payment.deadline | 2026-11-01 00:30:36 UTC |
| Payment.invoiceHash | 0x5124b0218a89265ef7a41003df0c88517c9ea822b28b4b657568d305c6c840fd |
| approverSig | (empty) |
| On-chain | tx 0xa2b544…a6d7c5 · block 8 · status 1 |
Calldata (260 bytes)
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
Raw invoice bound to calldata
Agent-supplied and untrusted: shown as inert text. This is the exact canonical byte string whose keccak256 is the invoiceHash.
{"amount":"12000000","invoice_id":"INV-1001","memo":"October hosting","payee":"0x2000000000000000000000000000000000000001","vendor":"0x1000000000000000000000000000000000000001"}| invoice_id | INV-1001 |
| vendor | 0x1000000000000000000000000000000000000001 |
| payee | 0x2000000000000000000000000000000000000001 |
| amount | 12000000 = 12.00 |
| memo | October hosting |
| keccak256 | 0x5124b0218a89265ef7a41003df0c88517c9ea822b28b4b657568d305c6c840fd |
Mandate v1 0x689f1cb4…44df8ee3first mandate: no previous version
This passport was decided under v1; v2 (0x243484…5daae1) has since been activated. The change is listed below the table.
Fields
| Field | v1 | Enforced by |
|---|---|---|
| vendors | 0x1000…0001, 0x1000…0002, 0x1000…0006 | C4 only |
| vendorPayees | 0x2000…0001, 0x2000…0002, 0x2000…0006 | C4 + C5 |
| token | 0x5fbd…0aa3 | C4 + C5 |
| maxTx | 20.00 | C4 + C5 |
| reviewThreshold | 15.00 | C4 + C5 |
| taskBudget | 100.00 | C4 counter; C5 via M6 |
| bucketCapacity | 40.00 | C5 |
| refillRate | 99 units/s (8.5536/day) | C5 |
| maxValidity | 7 d | C4 + C5 |
| expiry | 2026-11-08 00:00:04 UTC | C4 + C5 |
| issuedAt | 2026-11-01 00:00:04 UTC | C4 + C5 |
| chainId | 84532 | C5 |
| version | 1 | C4 only |
| nonce | 1 | C5 (minNonce) |
Then replaced by v2
| vendors | 0x1000…0001, 0x1000…0002, 0x1000…0006 → 0x1000…0001, 0x1000…0002, 0x1000…0006, 0x1000…0003, 0x1000…0004, 0x1000…0005 +0x1000…0003 +0x1000…0004 +0x1000…0005 |
| vendorPayees | 0x2000…0001, 0x2000…0002, 0x2000…0006 → 0x2000…0001, 0x2000…0002, 0x2000…0006, 0x2000…0003, 0x2000…0004, 0x2000…0005 +0x2000…0003 +0x2000…0004 +0x2000…0005 |
| maxTx | 20.00 → 25.00 |
| taskBudget | 100.00 → 80.00 |
| maxValidity | 7 d → 3 d |
| expiry | 2026-11-08 00:00:04 UTC → 2026-11-04 00:05:45 UTC |
| issuedAt | 2026-11-01 00:00:04 UTC → 2026-11-01 00:05:45 UTC |
| version | 1 → 2 |
| nonce | 1 → 2 |
This payment against the mandate
| Check | Payment | Mandate | Rule |
|---|---|---|---|
| ✓ token | 0x5fbd…0aa3 | 0x5fbd…0aa3 | G07 / C5 |
| ✓ payee ∈ vendorPayees | 0x2000…0001 | 3 allowed | G10 / C5 |
| ✓ vendor ∈ vendors | 0x1000…0001 | 3 allowed | G09 (C4 only) |
| ✓ 0 < amount ≤ maxTx | 12.00 | 20.00 | G11 / C5 |
| ✓ tier | Allow | threshold 15.00 | G13/G16 / C5 |
| ✓ deadline | 2026-11-01 00:30:36 UTC | mandate expiry 2026-11-08 00:00:04 UTC | G12 / C5 |
Display only. The gateway (GW-1) and the wallet decide; this table restates their limits. The task-budget counter and the bucket depend on history and are not recomputed here.
Risk graph graph engine · py/interlock_gateway/graph.py
The same in-memory graph the gateway queries before it signs (rules G22 Block, G23 Review). Directed edges, shortest path to a known bad actor: the address itself or one edge away is Block, two or more is Review, none within 6 is Allow, an unreachable graph is Review. It knows only what its operator file says; Allow means “no known link”, not “safe”.
Vendor / walletContractKnown bad actorsource: passport (recorded at decision)
At decision time (attested in the passport)
ALLOW payee 0x2000…0001 · no known bad actor within 6 hops
Live query not available: this is a static deployment with no graph service. The result above is the one the gateway recorded at decision time.
Labels come from the operator's graph file; payee and vendor names elsewhere on this page come from the address book.
What the agent read demo context · not attested
mail-1001 · email: billing@acme.example
Hello, please find invoice INV-1001 for October hosting: 12.00 USDC. Thanks, Acme billing
Raw passport
Show the JSON exactly as issued (3,755 canonical bytes)
{
"body": {
"kind": "interlock.verification-passport",
"version": "1",
"chain": {
"chain_id": "84532",
"wallet": "0xe7f1725e7734ce288f8367e1bb143e90bb3f0512",
"registry": "0x5fc8d32690cc91d4c39d9d3abcbd16989f875707"
},
"issuer": "0xbb50b6623454712be08befecb0b78b9ec7d16086",
"issued_at": "1793491237",
"request": {
"tx": {
"to": "0xe7f1725e7734ce288f8367e1bb143e90bb3f0512",
"data": "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",
"value": "0"
},
"claim": {
"invoice": {
"invoice_id": "INV-1001",
"vendor": "0x1000000000000000000000000000000000000001",
"payee": "0x2000000000000000000000000000000000000001",
"amount": "12000000",
"memo": "October hosting"
}
}
},
"decoded": {
"payment": {
"to": "0x2000000000000000000000000000000000000001",
"token": "0x5fbdb2315678afecb367f032d93f642f64180aa3",
"amount": "12000000",
"nonce": "1",
"deadline": "1793493036",
"invoiceHash": "0x5124b0218a89265ef7a41003df0c88517c9ea822b28b4b657568d305c6c840fd"
},
"approver_sig": ""
},
"mandate": {
"schema_version": "3",
"primaryType": "Mandate",
"domain": {
"name": "InterlockWallet",
"version": "1",
"chainId": "84532",
"verifyingContract": "0xe7f1725e7734ce288f8367e1bb143e90bb3f0512"
},
"message": {
"vendors": [
"0x1000000000000000000000000000000000000001",
"0x1000000000000000000000000000000000000002",
"0x1000000000000000000000000000000000000006"
],
"vendorPayees": [
"0x2000000000000000000000000000000000000001",
"0x2000000000000000000000000000000000000002",
"0x2000000000000000000000000000000000000006"
],
"token": "0x5fbdb2315678afecb367f032d93f642f64180aa3",
"maxTx": "20000000",
"reviewThreshold": "15000000",
"taskBudget": "100000000",
"bucketCapacity": "40000000",
"refillRate": "99",
"maxValidity": "604800",
"expiry": "1794096004",
"chainId": "84532",
"version": "1",
"nonce": "1",
"issuedAt": "1793491204"
},
"digest": "0x689f1cb4235c93afb83d21dd7a60a20365164d92bc7e5e83766934ed44df8ee3",
"signature": "0x21252fa3bf181ab519de983206520799e90502c1074d8b7ed30b9b4e906e73050adfd0b477feb7daa7c67dc36b72b279bc4b54dc3515e203a4b293360ea8ef261c"
},
"digests": {
"mandate": "0x689f1cb4235c93afb83d21dd7a60a20365164d92bc7e5e83766934ed44df8ee3",
"payment": "0xb0d4e8829a30fde03417616dec1c345e0d4ed9033e2c615024bc20d4cd675bfd",
"invoice": "0x5124b0218a89265ef7a41003df0c88517c9ea822b28b4b657568d305c6c840fd"
},
"verdict": {
"rule_id": "G20",
"rule": "ALLOW",
"decision": "Allow",
"deciding_layer": "wallet",
"outcome": "Executed",
"explanation": "ALLOWED. All checks passed and the simulation succeeded. After this payment, spending under the mandate will be 12.00 of 100.00 mUSDC. What the transaction does: pay 12.00 mUSDC from the Interlock wallet to Acme Payouts (0x2000…0001), for invoice \"INV-1001\" (agent-supplied) from Acme Corp (0x1000…0001). This is at or below the 15.00 mUSDC review threshold, so no approver signature is needed. The payment expires at 2026-11-01 00:30:36 UTC.",
"detail": null,
"wallet_error": null
},
"execution": {
"tx_hash": "0xa2b544461a6a50b9764bcaab39599851307ab2cbdc8be6686ff8e17280a6d7c5",
"block_number": "8",
"status": "1"
},
"graph": {
"address": "0x2000000000000000000000000000000000000001",
"verdict": "Allow",
"hops": null,
"path": [
{
"address": "0x2000000000000000000000000000000000000001",
"kind": "wallet",
"label": "Acme Payouts",
"via": null
}
],
"reason": "no known bad actor within 6 hops",
"path_text": "Acme Payouts",
"available": true,
"role": "payee",
"summary": "the payee Acme Payouts (0x2000…0001): no known bad actor within 6 hops"
}
},
"passport_hash": "0x439e80b6e788f804384da7882696d9d34326320e42b541aaca5ecc016906a07c",
"anchor": {
"kind": "anchor",
"registry": "0x5fc8d32690cc91d4c39d9d3abcbd16989f875707",
"attester": "0xbb50b6623454712be08befecb0b78b9ec7d16086",
"tx_hash": "0x02b4d1c58f882780f263ea6456ead6c4a3a627c23d654383fcdb3cd5966903b2",
"block_number": "9"
}
}