Passports / 08-v2-new-vendor

Initech, 9 USDC: allowed only by mandate v2

EXECUTED

G20 ALLOW · decision Allow · decided by wallet

Gateway's explanation (attested, not verifiable): ALLOWED. All checks passed and the simulation succeeded. After this payment, spending under the mandate will be 9.00 of 80.00 mUSDC. What the transaction does: pay 9.00 mUSDC from the Interlock wallet to Initech Payouts (0x2000…0003), for invoice "INV-3001" (agent-supplied) from Initech (0x1000…0003). This is at or below the 15.00 mUSDC review threshold, so no approver signature is needed. The payment expires at 2026-11-01 00:36:16 UTC.

Passport hash	0x33ec09e6d2dc9d13109586599cc223b351ccefbb1b8fbdfa7d519e05c61a4411
Issued by	0xbb50b6623454712be08befecb0b78b9ec7d16086 at 2026-11-01 00:06:17 UTC
C7 registry	attested + anchored to the payment digest · tx 0xc028d7…53b213 · block 27

Verification run in your browser, offline (static deployment)

VERIFYING…

Decoded transaction

Call	execute(Payment, bytes approverSig)
To (wallet)	0xe7f1725e7734ce288f8367e1bb143e90bb3f0512
Value	0 wei
Payment.to	Initech Payouts (0x2000…0003)
Payment.amount	9.00 (9000000 units)
Payment.token	0x5fbdb2315678afecb367f032d93f642f64180aa3
Payment.nonce	6 (agent range)
Payment.deadline	2026-11-01 00:36:16 UTC
Payment.invoiceHash	0x26dbc1d1fd07e94369e16a01899207ea01c3cc744a4f3602b9cf6433db91bdd8
approverSig	(empty)
On-chain	tx 0xadbb9c…29142f · block 26 · status 1

Calldata (260 bytes)

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

Raw invoice bound to calldata

Agent-supplied and untrusted: shown as inert text. This is the exact canonical byte string whose keccak256 is the invoiceHash.

{"amount":"9000000","invoice_id":"INV-3001","memo":"TPS tooling","payee":"0x2000000000000000000000000000000000000003","vendor":"0x1000000000000000000000000000000000000003"}

invoice_id	INV-3001
vendor	0x1000000000000000000000000000000000000003
payee	0x2000000000000000000000000000000000000003
amount	9000000 = 9.00
memo	TPS tooling
keccak256	0x26dbc1d1fd07e94369e16a01899207ea01c3cc744a4f3602b9cf6433db91bdd8

Mandate v2 0x243484de…465daae1diff vs v1

Fields: v1 → v2

Field	v1	v2	Enforced by
vendors	0x1000…0001, 0x1000…0002, 0x1000…0006	0x1000…0001, 0x1000…0002, 0x1000…0006, 0x1000…0003, 0x1000…0004, 0x1000…0005 + 0x1000…0003 + 0x1000…0004 + 0x1000…0005	C4 only
vendorPayees	0x2000…0001, 0x2000…0002, 0x2000…0006	0x2000…0001, 0x2000…0002, 0x2000…0006, 0x2000…0003, 0x2000…0004, 0x2000…0005 + 0x2000…0003 + 0x2000…0004 + 0x2000…0005	C4 + C5
token	0x5fbd…0aa3	0x5fbd…0aa3	C4 + C5
maxTx	20.00	25.00	C4 + C5
reviewThreshold	15.00	15.00	C4 + C5
taskBudget	100.00	80.00	C4 counter; C5 via M6
bucketCapacity	40.00	40.00	C5
refillRate	99 units/s (8.5536/day)	99 units/s (8.5536/day)	C5
maxValidity	7 d	3 d	C4 + C5
expiry	2026-11-08 00:00:04 UTC	2026-11-04 00:05:45 UTC	C4 + C5
issuedAt	2026-11-01 00:00:04 UTC	2026-11-01 00:05:45 UTC	C4 + C5
chainId	84532	84532	C5
version	1	2	C4 only
nonce	1	2	C5 (minNonce)

This payment against the mandate

Check	Payment	Mandate	Rule
✓ token	0x5fbd…0aa3	0x5fbd…0aa3	G07 / C5
✓ payee ∈ vendorPayees	0x2000…0003	6 allowed	G10 / C5
✓ vendor ∈ vendors	0x1000…0003	6 allowed	G09 (C4 only)
✓ 0 < amount ≤ maxTx	9.00	25.00	G11 / C5
✓ tier	Allow	threshold 15.00	G13/G16 / C5
✓ deadline	2026-11-01 00:36:16 UTC	mandate expiry 2026-11-04 00:05:45 UTC	G12 / C5

Display only. The gateway (GW-1) and the wallet decide; this table restates their limits. The task-budget counter and the bucket depend on history and are not recomputed here.

Risk graph graph engine · py/interlock_gateway/graph.py

The same in-memory graph the gateway queries before it signs (rules G22 Block, G23 Review). Directed edges, shortest path to a known bad actor: the address itself or one edge away is Block, two or more is Review, none within 6 is Allow, an unreachable graph is Review. It knows only what its operator file says; Allow means “no known link”, not “safe”.

Vendor / walletContractKnown bad actorsource: passport (recorded at decision)

At decision time (attested in the passport)

ALLOW payee 0x2000…0003 · no known bad actor within 6 hops

Live query not available: this is a static deployment with no graph service. The result above is the one the gateway recorded at decision time.

Labels come from the operator's graph file; payee and vendor names elsewhere on this page come from the address book.

What the agent read demo context · not attested

mail-3001 · email: invoices@initech.example

Initech TPS report tooling, INV-3001, 9.00 USDC.

Raw passport

Show the JSON exactly as issued (4,026 canonical bytes)

{
  "body": {
    "kind": "interlock.verification-passport",
    "version": "1",
    "chain": {
      "chain_id": "84532",
      "wallet": "0xe7f1725e7734ce288f8367e1bb143e90bb3f0512",
      "registry": "0x5fc8d32690cc91d4c39d9d3abcbd16989f875707"
    },
    "issuer": "0xbb50b6623454712be08befecb0b78b9ec7d16086",
    "issued_at": "1793491577",
    "request": {
      "tx": {
        "to": "0xe7f1725e7734ce288f8367e1bb143e90bb3f0512",
        "data": "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",
        "value": "0"
      },
      "claim": {
        "invoice": {
          "invoice_id": "INV-3001",
          "vendor": "0x1000000000000000000000000000000000000003",
          "payee": "0x2000000000000000000000000000000000000003",
          "amount": "9000000",
          "memo": "TPS tooling"
        }
      }
    },
    "decoded": {
      "payment": {
        "to": "0x2000000000000000000000000000000000000003",
        "token": "0x5fbdb2315678afecb367f032d93f642f64180aa3",
        "amount": "9000000",
        "nonce": "6",
        "deadline": "1793493376",
        "invoiceHash": "0x26dbc1d1fd07e94369e16a01899207ea01c3cc744a4f3602b9cf6433db91bdd8"
      },
      "approver_sig": ""
    },
    "mandate": {
      "schema_version": "3",
      "primaryType": "Mandate",
      "domain": {
        "name": "InterlockWallet",
        "version": "1",
        "chainId": "84532",
        "verifyingContract": "0xe7f1725e7734ce288f8367e1bb143e90bb3f0512"
      },
      "message": {
        "vendors": [
          "0x1000000000000000000000000000000000000001",
          "0x1000000000000000000000000000000000000002",
          "0x1000000000000000000000000000000000000006",
          "0x1000000000000000000000000000000000000003",
          "0x1000000000000000000000000000000000000004",
          "0x1000000000000000000000000000000000000005"
        ],
        "vendorPayees": [
          "0x2000000000000000000000000000000000000001",
          "0x2000000000000000000000000000000000000002",
          "0x2000000000000000000000000000000000000006",
          "0x2000000000000000000000000000000000000003",
          "0x2000000000000000000000000000000000000004",
          "0x2000000000000000000000000000000000000005"
        ],
        "token": "0x5fbdb2315678afecb367f032d93f642f64180aa3",
        "maxTx": "25000000",
        "reviewThreshold": "15000000",
        "taskBudget": "80000000",
        "bucketCapacity": "40000000",
        "refillRate": "99",
        "maxValidity": "259200",
        "expiry": "1793750745",
        "chainId": "84532",
        "version": "2",
        "nonce": "2",
        "issuedAt": "1793491545"
      },
      "digest": "0x243484de24d070cf8b343b5a8e0cbc2e685c698170d0e2dd44547f74465daae1",
      "signature": "0x0216958bdf56a2d43908c273f856ba393395789e1bfe1e2c96fd4b4ce2a0b19d6f08bc267c5502b9695db25e2f20495537f49b880c3974e2e691027eb2c96af11c"
    },
    "digests": {
      "mandate": "0x243484de24d070cf8b343b5a8e0cbc2e685c698170d0e2dd44547f74465daae1",
      "payment": "0x690118ac65b01143d91b9e420238b07ff8ff2a1e523607201cabf688715e6575",
      "invoice": "0x26dbc1d1fd07e94369e16a01899207ea01c3cc744a4f3602b9cf6433db91bdd8"
    },
    "verdict": {
      "rule_id": "G20",
      "rule": "ALLOW",
      "decision": "Allow",
      "deciding_layer": "wallet",
      "outcome": "Executed",
      "explanation": "ALLOWED. All checks passed and the simulation succeeded. After this payment, spending under the mandate will be 9.00 of 80.00 mUSDC. What the transaction does: pay 9.00 mUSDC from the Interlock wallet to Initech Payouts (0x2000…0003), for invoice \"INV-3001\" (agent-supplied) from Initech (0x1000…0003). This is at or below the 15.00 mUSDC review threshold, so no approver signature is needed. The payment expires at 2026-11-01 00:36:16 UTC.",
      "detail": null,
      "wallet_error": null
    },
    "execution": {
      "tx_hash": "0xadbb9c7f29e69dd585bb76d8eccc48dd48f0e73c9f47f80eb401ed363729142f",
      "block_number": "26",
      "status": "1"
    },
    "graph": {
      "address": "0x2000000000000000000000000000000000000003",
      "verdict": "Allow",
      "hops": null,
      "path": [
        {
          "address": "0x2000000000000000000000000000000000000003",
          "kind": "wallet",
          "label": "Initech Payouts",
          "via": null
        }
      ],
      "reason": "no known bad actor within 6 hops",
      "path_text": "Initech Payouts",
      "available": true,
      "role": "payee",
      "summary": "the payee Initech Payouts (0x2000…0003): no known bad actor within 6 hops"
    }
  },
  "passport_hash": "0x33ec09e6d2dc9d13109586599cc223b351ccefbb1b8fbdfa7d519e05c61a4411",
  "anchor": {
    "kind": "anchor",
    "registry": "0x5fc8d32690cc91d4c39d9d3abcbd16989f875707",
    "attester": "0xbb50b6623454712be08befecb0b78b9ec7d16086",
    "tx_hash": "0xc028d7bf933b0c4419094688dc3211998c8f38b692c4cf58c30e6d0b0853b213",
    "block_number": "27"
  }
}