Passports / 10-hostile-memo

Legit payment whose memo carries HTML and bidi tricks

EXECUTED

G20 ALLOW · decision Allow · decided by wallet

Gateway's explanation (attested, not verifiable): ALLOWED. All checks passed and the simulation succeeded. After this payment, spending under the mandate will be 12.00 of 80.00 mUSDC. What the transaction does: pay 3.00 mUSDC from the Interlock wallet to Acme Payouts (0x2000…0001), for invoice "INV-1005" (agent-supplied) from Acme Corp (0x1000…0001). This is at or below the 15.00 mUSDC review threshold, so no approver signature is needed. The payment expires at 2026-11-01 00:37:19 UTC.

Passport hash	0x2524045e9e84da87c5ad4ed7b786914815ba478c0bb53c2179c24ba91178789d
Issued by	0xbb50b6623454712be08befecb0b78b9ec7d16086 at 2026-11-01 00:07:20 UTC
C7 registry	attested + anchored to the payment digest · tx 0xbadd87…552576 · block 32

Verification run in your browser, offline (static deployment)

VERIFYING…

Decoded transaction

Call	execute(Payment, bytes approverSig)
To (wallet)	0xe7f1725e7734ce288f8367e1bb143e90bb3f0512
Value	0 wei
Payment.to	Acme Payouts (0x2000…0001)
Payment.amount	3.00 (3000000 units)
Payment.token	0x5fbdb2315678afecb367f032d93f642f64180aa3
Payment.nonce	8 (agent range)
Payment.deadline	2026-11-01 00:37:19 UTC
Payment.invoiceHash	0xfd473dc2bf3167daa26cf94dabe50b1ddff53872e9c1d84321c9c0cd46f0599f
approverSig	(empty)
On-chain	tx 0x755fdb…2813da · block 31 · status 1

Calldata (260 bytes)

0xbd57de2300000000000000000000000020000000000000000000000000000000000000010000000000000000000000005fbdb2315678afecb367f032d93f642f64180aa300000000000000000000000000000000000000000000000000000000002dc6c00000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000006ae689bffd473dc2bf3167daa26cf94dabe50b1ddff53872e9c1d84321c9c0cd46f0599f00000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000

Raw invoice bound to calldata

Agent-supplied and untrusted: shown as inert text. This is the exact canonical byte string whose keccak256 is the invoiceHash.

Contains 3 invisible or direction-changing character(s) (U+202E, U+202C, U+200B). They are shown as ⟦U+XXXX⟧ below.

{"amount":"3000000","invoice_id":"INV-1005","memo":"Q4 <img src=x onerror=\"alert(1)\"><script>alert(2)</script> ⟦U+202E⟧DIUP⟦U+202C⟧ ⟦U+200B⟧zero-width","payee":"0x2000000000000000000000000000000000000001","vendor":"0x1000000000000000000000000000000000000001"}

invoice_id	INV-1005
vendor	0x1000000000000000000000000000000000000001
payee	0x2000000000000000000000000000000000000001
amount	3000000 = 3.00
memo	Q4 <img src=x onerror="alert(1)"><script>alert(2)</script> ⟦U+202E⟧DIUP⟦U+202C⟧ ⟦U+200B⟧zero-width
keccak256	0xfd473dc2bf3167daa26cf94dabe50b1ddff53872e9c1d84321c9c0cd46f0599f

Mandate v2 0x243484de…465daae1diff vs v1

Fields: v1 → v2

Field	v1	v2	Enforced by
vendors	0x1000…0001, 0x1000…0002, 0x1000…0006	0x1000…0001, 0x1000…0002, 0x1000…0006, 0x1000…0003, 0x1000…0004, 0x1000…0005 + 0x1000…0003 + 0x1000…0004 + 0x1000…0005	C4 only
vendorPayees	0x2000…0001, 0x2000…0002, 0x2000…0006	0x2000…0001, 0x2000…0002, 0x2000…0006, 0x2000…0003, 0x2000…0004, 0x2000…0005 + 0x2000…0003 + 0x2000…0004 + 0x2000…0005	C4 + C5
token	0x5fbd…0aa3	0x5fbd…0aa3	C4 + C5
maxTx	20.00	25.00	C4 + C5
reviewThreshold	15.00	15.00	C4 + C5
taskBudget	100.00	80.00	C4 counter; C5 via M6
bucketCapacity	40.00	40.00	C5
refillRate	99 units/s (8.5536/day)	99 units/s (8.5536/day)	C5
maxValidity	7 d	3 d	C4 + C5
expiry	2026-11-08 00:00:04 UTC	2026-11-04 00:05:45 UTC	C4 + C5
issuedAt	2026-11-01 00:00:04 UTC	2026-11-01 00:05:45 UTC	C4 + C5
chainId	84532	84532	C5
version	1	2	C4 only
nonce	1	2	C5 (minNonce)

This payment against the mandate

Check	Payment	Mandate	Rule
✓ token	0x5fbd…0aa3	0x5fbd…0aa3	G07 / C5
✓ payee ∈ vendorPayees	0x2000…0001	6 allowed	G10 / C5
✓ vendor ∈ vendors	0x1000…0001	6 allowed	G09 (C4 only)
✓ 0 < amount ≤ maxTx	3.00	25.00	G11 / C5
✓ tier	Allow	threshold 15.00	G13/G16 / C5
✓ deadline	2026-11-01 00:37:19 UTC	mandate expiry 2026-11-04 00:05:45 UTC	G12 / C5

Display only. The gateway (GW-1) and the wallet decide; this table restates their limits. The task-budget counter and the bucket depend on history and are not recomputed here.

Risk graph graph engine · py/interlock_gateway/graph.py

The same in-memory graph the gateway queries before it signs (rules G22 Block, G23 Review). Directed edges, shortest path to a known bad actor: the address itself or one edge away is Block, two or more is Review, none within 6 is Allow, an unreachable graph is Review. It knows only what its operator file says; Allow means “no known link”, not “safe”.

Vendor / walletContractKnown bad actorsource: passport (recorded at decision)

At decision time (attested in the passport)

ALLOW payee 0x2000…0001 · no known bad actor within 6 hops

Live query not available: this is a static deployment with no graph service. The result above is the one the gateway recorded at decision time.

Labels come from the operator's graph file; payee and vendor names elsewhere on this page come from the address book.

What the agent read demo context · not attested

mail-1005 · email: billing@acme.example

Invoice INV-1005, 3.00 USDC. Q4 <img src=x onerror="alert(1)"><script>alert(2)</script> ⟦U+202E⟧DIUP⟦U+202C⟧ ⟦U+200B⟧zero-width

Raw passport

Show the JSON exactly as issued (4,085 canonical bytes)

{
  "body": {
    "kind": "interlock.verification-passport",
    "version": "1",
    "chain": {
      "chain_id": "84532",
      "wallet": "0xe7f1725e7734ce288f8367e1bb143e90bb3f0512",
      "registry": "0x5fc8d32690cc91d4c39d9d3abcbd16989f875707"
    },
    "issuer": "0xbb50b6623454712be08befecb0b78b9ec7d16086",
    "issued_at": "1793491640",
    "request": {
      "tx": {
        "to": "0xe7f1725e7734ce288f8367e1bb143e90bb3f0512",
        "data": "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",
        "value": "0"
      },
      "claim": {
        "invoice": {
          "invoice_id": "INV-1005",
          "vendor": "0x1000000000000000000000000000000000000001",
          "payee": "0x2000000000000000000000000000000000000001",
          "amount": "3000000",
          "memo": "Q4 <img src=x onerror=\"alert(1)\"><script>alert(2)</script> ‮DIUP‬ zero-width"
        }
      }
    },
    "decoded": {
      "payment": {
        "to": "0x2000000000000000000000000000000000000001",
        "token": "0x5fbdb2315678afecb367f032d93f642f64180aa3",
        "amount": "3000000",
        "nonce": "8",
        "deadline": "1793493439",
        "invoiceHash": "0xfd473dc2bf3167daa26cf94dabe50b1ddff53872e9c1d84321c9c0cd46f0599f"
      },
      "approver_sig": ""
    },
    "mandate": {
      "schema_version": "3",
      "primaryType": "Mandate",
      "domain": {
        "name": "InterlockWallet",
        "version": "1",
        "chainId": "84532",
        "verifyingContract": "0xe7f1725e7734ce288f8367e1bb143e90bb3f0512"
      },
      "message": {
        "vendors": [
          "0x1000000000000000000000000000000000000001",
          "0x1000000000000000000000000000000000000002",
          "0x1000000000000000000000000000000000000006",
          "0x1000000000000000000000000000000000000003",
          "0x1000000000000000000000000000000000000004",
          "0x1000000000000000000000000000000000000005"
        ],
        "vendorPayees": [
          "0x2000000000000000000000000000000000000001",
          "0x2000000000000000000000000000000000000002",
          "0x2000000000000000000000000000000000000006",
          "0x2000000000000000000000000000000000000003",
          "0x2000000000000000000000000000000000000004",
          "0x2000000000000000000000000000000000000005"
        ],
        "token": "0x5fbdb2315678afecb367f032d93f642f64180aa3",
        "maxTx": "25000000",
        "reviewThreshold": "15000000",
        "taskBudget": "80000000",
        "bucketCapacity": "40000000",
        "refillRate": "99",
        "maxValidity": "259200",
        "expiry": "1793750745",
        "chainId": "84532",
        "version": "2",
        "nonce": "2",
        "issuedAt": "1793491545"
      },
      "digest": "0x243484de24d070cf8b343b5a8e0cbc2e685c698170d0e2dd44547f74465daae1",
      "signature": "0x0216958bdf56a2d43908c273f856ba393395789e1bfe1e2c96fd4b4ce2a0b19d6f08bc267c5502b9695db25e2f20495537f49b880c3974e2e691027eb2c96af11c"
    },
    "digests": {
      "mandate": "0x243484de24d070cf8b343b5a8e0cbc2e685c698170d0e2dd44547f74465daae1",
      "payment": "0x629df1d253ef328a4f903be22538495001d4be2cb4220d9ac41bba51eb2a44cb",
      "invoice": "0xfd473dc2bf3167daa26cf94dabe50b1ddff53872e9c1d84321c9c0cd46f0599f"
    },
    "verdict": {
      "rule_id": "G20",
      "rule": "ALLOW",
      "decision": "Allow",
      "deciding_layer": "wallet",
      "outcome": "Executed",
      "explanation": "ALLOWED. All checks passed and the simulation succeeded. After this payment, spending under the mandate will be 12.00 of 80.00 mUSDC. What the transaction does: pay 3.00 mUSDC from the Interlock wallet to Acme Payouts (0x2000…0001), for invoice \"INV-1005\" (agent-supplied) from Acme Corp (0x1000…0001). This is at or below the 15.00 mUSDC review threshold, so no approver signature is needed. The payment expires at 2026-11-01 00:37:19 UTC.",
      "detail": null,
      "wallet_error": null
    },
    "execution": {
      "tx_hash": "0x755fdb7b56952695fd15caad038e3c4cd45b1cd224953a0ba380d8a8ec2813da",
      "block_number": "31",
      "status": "1"
    },
    "graph": {
      "address": "0x2000000000000000000000000000000000000001",
      "verdict": "Allow",
      "hops": null,
      "path": [
        {
          "address": "0x2000000000000000000000000000000000000001",
          "kind": "wallet",
          "label": "Acme Payouts",
          "via": null
        }
      ],
      "reason": "no known bad actor within 6 hops",
      "path_text": "Acme Payouts",
      "available": true,
      "role": "payee",
      "summary": "the payee Acme Payouts (0x2000…0001): no known bad actor within 6 hops"
    }
  },
  "passport_hash": "0x2524045e9e84da87c5ad4ed7b786914815ba478c0bb53c2179c24ba91178789d",
  "anchor": {
    "kind": "anchor",
    "registry": "0x5fc8d32690cc91d4c39d9d3abcbd16989f875707",
    "attester": "0xbb50b6623454712be08befecb0b78b9ec7d16086",
    "tx_hash": "0xbadd87aeb1e12cb4658b1ab6e518095d3d7219d76d8378ddcde0304146552576",
    "block_number": "32"
  }
}