Passports / 03-review-approved

Same payment, approver signature attached

EXECUTED

G20 ALLOW · decision Allow · decided by wallet

Gateway's explanation (attested, not verifiable): ALLOWED. All checks passed and the simulation succeeded. After this payment, spending under the mandate will be 30.00 of 100.00 mUSDC. What the transaction does: pay 18.00 mUSDC from the Interlock wallet to Globex Payouts (0x2000…0002), for invoice "INV-2001" (agent-supplied) from Globex (0x1000…0002). This is above the 15.00 mUSDC review threshold, so it needs the approver's signature. The payment expires at 2026-11-01 00:31:08 UTC.

Passport hash	0x1e81a6286a8b699113de3d863f806ba3b47791d0db5fe8074f7932780b837e31
Issued by	0xbb50b6623454712be08befecb0b78b9ec7d16086 at 2026-11-01 00:01:40 UTC
C7 registry	attested + anchored to the payment digest · tx 0xae7b0c…be8cc6 · block 14

Verification run in your browser, offline (static deployment)

VERIFYING…

Decoded transaction

Call	execute(Payment, bytes approverSig)
To (wallet)	0xe7f1725e7734ce288f8367e1bb143e90bb3f0512
Value	0 wei
Payment.to	Globex Payouts (0x2000…0002)
Payment.amount	18.00 (18000000 units)
Payment.token	0x5fbdb2315678afecb367f032d93f642f64180aa3
Payment.nonce	2²⁵⁵ + 2 (approver range)
Payment.deadline	2026-11-01 00:31:08 UTC
Payment.invoiceHash	0xeef3e5e5554c836df824258181a8a46b5ea7c21e3224216e9d7dba55e837c7ca
approverSig	0x507e502f18…065a76ca1c
On-chain	tx 0x70e15e…9c79e7 · block 13 · status 1

Calldata (356 bytes)

0xbd57de2300000000000000000000000020000000000000000000000000000000000000020000000000000000000000005fbdb2315678afecb367f032d93f642f64180aa3000000000000000000000000000000000000000000000000000000000112a8808000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000006ae6884ceef3e5e5554c836df824258181a8a46b5ea7c21e3224216e9d7dba55e837c7ca00000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000041507e502f185dd0b8edaa8b45d11df42fbb02ab5706076bdd7b93db62a0a867ad55a4224f43cc9dbccd12c19961b736b4ef840bfde4f82972d1b7753d065a76ca1c00000000000000000000000000000000000000000000000000000000000000

Raw invoice bound to calldata

Agent-supplied and untrusted: shown as inert text. This is the exact canonical byte string whose keccak256 is the invoiceHash.

{"amount":"18000000","invoice_id":"INV-2001","memo":"Q4 consulting","payee":"0x2000000000000000000000000000000000000002","vendor":"0x1000000000000000000000000000000000000002"}

invoice_id	INV-2001
vendor	0x1000000000000000000000000000000000000002
payee	0x2000000000000000000000000000000000000002
amount	18000000 = 18.00
memo	Q4 consulting
keccak256	0xeef3e5e5554c836df824258181a8a46b5ea7c21e3224216e9d7dba55e837c7ca

Mandate v1 0x689f1cb4…44df8ee3first mandate: no previous version

This passport was decided under v1; v2 (0x243484…5daae1) has since been activated. The change is listed below the table.

Fields

Field	v1	Enforced by
vendors	0x1000…0001, 0x1000…0002, 0x1000…0006	C4 only
vendorPayees	0x2000…0001, 0x2000…0002, 0x2000…0006	C4 + C5
token	0x5fbd…0aa3	C4 + C5
maxTx	20.00	C4 + C5
reviewThreshold	15.00	C4 + C5
taskBudget	100.00	C4 counter; C5 via M6
bucketCapacity	40.00	C5
refillRate	99 units/s (8.5536/day)	C5
maxValidity	7 d	C4 + C5
expiry	2026-11-08 00:00:04 UTC	C4 + C5
issuedAt	2026-11-01 00:00:04 UTC	C4 + C5
chainId	84532	C5
version	1	C4 only
nonce	1	C5 (minNonce)

Then replaced by v2

vendors	0x1000…0001, 0x1000…0002, 0x1000…0006 → 0x1000…0001, 0x1000…0002, 0x1000…0006, 0x1000…0003, 0x1000…0004, 0x1000…0005 +0x1000…0003 +0x1000…0004 +0x1000…0005
vendorPayees	0x2000…0001, 0x2000…0002, 0x2000…0006 → 0x2000…0001, 0x2000…0002, 0x2000…0006, 0x2000…0003, 0x2000…0004, 0x2000…0005 +0x2000…0003 +0x2000…0004 +0x2000…0005
maxTx	20.00 → 25.00
taskBudget	100.00 → 80.00
maxValidity	7 d → 3 d
expiry	2026-11-08 00:00:04 UTC → 2026-11-04 00:05:45 UTC
issuedAt	2026-11-01 00:00:04 UTC → 2026-11-01 00:05:45 UTC
version	1 → 2
nonce	1 → 2

This payment against the mandate

Check	Payment	Mandate	Rule
✓ token	0x5fbd…0aa3	0x5fbd…0aa3	G07 / C5
✓ payee ∈ vendorPayees	0x2000…0002	3 allowed	G10 / C5
✓ vendor ∈ vendors	0x1000…0002	3 allowed	G09 (C4 only)
✓ 0 < amount ≤ maxTx	18.00	20.00	G11 / C5
✓ tier	Review (needs approver)	threshold 15.00	G13/G16 / C5
✓ deadline	2026-11-01 00:31:08 UTC	mandate expiry 2026-11-08 00:00:04 UTC	G12 / C5

Display only. The gateway (GW-1) and the wallet decide; this table restates their limits. The task-budget counter and the bucket depend on history and are not recomputed here.

Risk graph graph engine · py/interlock_gateway/graph.py

The same in-memory graph the gateway queries before it signs (rules G22 Block, G23 Review). Directed edges, shortest path to a known bad actor: the address itself or one edge away is Block, two or more is Review, none within 6 is Allow, an unreachable graph is Review. It knows only what its operator file says; Allow means “no known link”, not “safe”.

Vendor / walletContractKnown bad actorsource: passport (recorded at decision)

At decision time (attested in the passport)

ALLOW payee 0x2000…0002 · no known bad actor within 6 hops

Live query not available: this is a static deployment with no graph service. The result above is the one the gateway recorded at decision time.

Labels come from the operator's graph file; payee and vendor names elsewhere on this page come from the address book.

What the agent read demo context · not attested

pdf-2001 · attachment: globex-INV-2001.pdf

Globex consulting, invoice INV-2001, 18.00 USDC due.

Raw passport

Show the JSON exactly as issued (4,155 canonical bytes)

{
  "body": {
    "kind": "interlock.verification-passport",
    "version": "1",
    "chain": {
      "chain_id": "84532",
      "wallet": "0xe7f1725e7734ce288f8367e1bb143e90bb3f0512",
      "registry": "0x5fc8d32690cc91d4c39d9d3abcbd16989f875707"
    },
    "issuer": "0xbb50b6623454712be08befecb0b78b9ec7d16086",
    "issued_at": "1793491300",
    "request": {
      "tx": {
        "to": "0xe7f1725e7734ce288f8367e1bb143e90bb3f0512",
        "data": "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",
        "value": "0"
      },
      "claim": {
        "invoice": {
          "invoice_id": "INV-2001",
          "vendor": "0x1000000000000000000000000000000000000002",
          "payee": "0x2000000000000000000000000000000000000002",
          "amount": "18000000",
          "memo": "Q4 consulting"
        }
      }
    },
    "decoded": {
      "payment": {
        "to": "0x2000000000000000000000000000000000000002",
        "token": "0x5fbdb2315678afecb367f032d93f642f64180aa3",
        "amount": "18000000",
        "nonce": "57896044618658097711785492504343953926634992332820282019728792003956564819970",
        "deadline": "1793493068",
        "invoiceHash": "0xeef3e5e5554c836df824258181a8a46b5ea7c21e3224216e9d7dba55e837c7ca"
      },
      "approver_sig": "0x507e502f185dd0b8edaa8b45d11df42fbb02ab5706076bdd7b93db62a0a867ad55a4224f43cc9dbccd12c19961b736b4ef840bfde4f82972d1b7753d065a76ca1c"
    },
    "mandate": {
      "schema_version": "3",
      "primaryType": "Mandate",
      "domain": {
        "name": "InterlockWallet",
        "version": "1",
        "chainId": "84532",
        "verifyingContract": "0xe7f1725e7734ce288f8367e1bb143e90bb3f0512"
      },
      "message": {
        "vendors": [
          "0x1000000000000000000000000000000000000001",
          "0x1000000000000000000000000000000000000002",
          "0x1000000000000000000000000000000000000006"
        ],
        "vendorPayees": [
          "0x2000000000000000000000000000000000000001",
          "0x2000000000000000000000000000000000000002",
          "0x2000000000000000000000000000000000000006"
        ],
        "token": "0x5fbdb2315678afecb367f032d93f642f64180aa3",
        "maxTx": "20000000",
        "reviewThreshold": "15000000",
        "taskBudget": "100000000",
        "bucketCapacity": "40000000",
        "refillRate": "99",
        "maxValidity": "604800",
        "expiry": "1794096004",
        "chainId": "84532",
        "version": "1",
        "nonce": "1",
        "issuedAt": "1793491204"
      },
      "digest": "0x689f1cb4235c93afb83d21dd7a60a20365164d92bc7e5e83766934ed44df8ee3",
      "signature": "0x21252fa3bf181ab519de983206520799e90502c1074d8b7ed30b9b4e906e73050adfd0b477feb7daa7c67dc36b72b279bc4b54dc3515e203a4b293360ea8ef261c"
    },
    "digests": {
      "mandate": "0x689f1cb4235c93afb83d21dd7a60a20365164d92bc7e5e83766934ed44df8ee3",
      "payment": "0x9f3470ad904a1d1e4412ff33262120904557cb5d4f5d9b285988074c52bdb835",
      "invoice": "0xeef3e5e5554c836df824258181a8a46b5ea7c21e3224216e9d7dba55e837c7ca"
    },
    "verdict": {
      "rule_id": "G20",
      "rule": "ALLOW",
      "decision": "Allow",
      "deciding_layer": "wallet",
      "outcome": "Executed",
      "explanation": "ALLOWED. All checks passed and the simulation succeeded. After this payment, spending under the mandate will be 30.00 of 100.00 mUSDC. What the transaction does: pay 18.00 mUSDC from the Interlock wallet to Globex Payouts (0x2000…0002), for invoice \"INV-2001\" (agent-supplied) from Globex (0x1000…0002). This is above the 15.00 mUSDC review threshold, so it needs the approver's signature. The payment expires at 2026-11-01 00:31:08 UTC.",
      "detail": null,
      "wallet_error": null
    },
    "execution": {
      "tx_hash": "0x70e15e8c77f1d8e36dc4e4704f02a09c32ac5c6d49881c5048f7acab4c9c79e7",
      "block_number": "13",
      "status": "1"
    },
    "graph": {
      "address": "0x2000000000000000000000000000000000000002",
      "verdict": "Allow",
      "hops": null,
      "path": [
        {
          "address": "0x2000000000000000000000000000000000000002",
          "kind": "wallet",
          "label": "Globex Payouts",
          "via": null
        }
      ],
      "reason": "no known bad actor within 6 hops",
      "path_text": "Globex Payouts",
      "available": true,
      "role": "payee",
      "summary": "the payee Globex Payouts (0x2000…0002): no known bad actor within 6 hops"
    }
  },
  "passport_hash": "0x1e81a6286a8b699113de3d863f806ba3b47791d0db5fe8074f7932780b837e31",
  "anchor": {
    "kind": "anchor",
    "registry": "0x5fc8d32690cc91d4c39d9d3abcbd16989f875707",
    "attester": "0xbb50b6623454712be08befecb0b78b9ec7d16086",
    "tx_hash": "0xae7b0c21466d0c6352700dd60f002ed086c9580e625966e1b60149c7bebe8cc6",
    "block_number": "14"
  }
}