Passports / 11-graph-direct

Hooli: allowed by the mandate, payee one edge from a bad actor

BLOCKED

G22 GRAPH_RISK_BLOCK · decision Block · decided by gateway

Gateway's explanation (attested, not verifiable): BLOCKED. Risk graph: the payee Hooli Payouts (0x2000…0004) has a direct edge to a known bad actor: Hooli Payouts -> Known Bad Actor. The gateway will not pay an address linked this closely to a known bad actor. What the transaction does: pay 4.00 mUSDC from the Interlock wallet to Hooli Payouts (0x2000…0004), for invoice "INV-4001" (agent-supplied) from Hooli (0x1000…0004). This is at or below the 15.00 mUSDC review threshold, so no approver signature is needed. The payment expires at 2026-11-01 00:37:51 UTC.

Passport hash	0x3b9dc8e945493b36ee6d97294302e8b76902af3432196011f6ef7d9faa2c8d09
Issued by	0xbb50b6623454712be08befecb0b78b9ec7d16086 at 2026-11-01 00:07:51 UTC
C7 registry	attested · tx 0x864031…c8aa7b · block 34

Verification run in your browser, offline (static deployment)

VERIFYING…

Decoded transaction

Call	execute(Payment, bytes approverSig)
To (wallet)	0xe7f1725e7734ce288f8367e1bb143e90bb3f0512
Value	0 wei
Payment.to	Hooli Payouts (0x2000…0004)
Payment.amount	4.00 (4000000 units)
Payment.token	0x5fbdb2315678afecb367f032d93f642f64180aa3
Payment.nonce	9 (agent range)
Payment.deadline	2026-11-01 00:37:51 UTC
Payment.invoiceHash	0x9218dd8f8635497f0f2d49311fe3b2d5ccfbfd3053d496c598af78a99a1fdaf7
approverSig	(empty)
On-chain	not sent

Calldata (260 bytes)

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

Raw invoice bound to calldata

Agent-supplied and untrusted: shown as inert text. This is the exact canonical byte string whose keccak256 is the invoiceHash.

{"amount":"4000000","invoice_id":"INV-4001","memo":"Compression licence","payee":"0x2000000000000000000000000000000000000004","vendor":"0x1000000000000000000000000000000000000004"}

invoice_id	INV-4001
vendor	0x1000000000000000000000000000000000000004
payee	0x2000000000000000000000000000000000000004
amount	4000000 = 4.00
memo	Compression licence
keccak256	0x9218dd8f8635497f0f2d49311fe3b2d5ccfbfd3053d496c598af78a99a1fdaf7

Mandate v2 0x243484de…465daae1diff vs v1

Fields: v1 → v2

Field	v1	v2	Enforced by
vendors	0x1000…0001, 0x1000…0002, 0x1000…0006	0x1000…0001, 0x1000…0002, 0x1000…0006, 0x1000…0003, 0x1000…0004, 0x1000…0005 + 0x1000…0003 + 0x1000…0004 + 0x1000…0005	C4 only
vendorPayees	0x2000…0001, 0x2000…0002, 0x2000…0006	0x2000…0001, 0x2000…0002, 0x2000…0006, 0x2000…0003, 0x2000…0004, 0x2000…0005 + 0x2000…0003 + 0x2000…0004 + 0x2000…0005	C4 + C5
token	0x5fbd…0aa3	0x5fbd…0aa3	C4 + C5
maxTx	20.00	25.00	C4 + C5
reviewThreshold	15.00	15.00	C4 + C5
taskBudget	100.00	80.00	C4 counter; C5 via M6
bucketCapacity	40.00	40.00	C5
refillRate	99 units/s (8.5536/day)	99 units/s (8.5536/day)	C5
maxValidity	7 d	3 d	C4 + C5
expiry	2026-11-08 00:00:04 UTC	2026-11-04 00:05:45 UTC	C4 + C5
issuedAt	2026-11-01 00:00:04 UTC	2026-11-01 00:05:45 UTC	C4 + C5
chainId	84532	84532	C5
version	1	2	C4 only
nonce	1	2	C5 (minNonce)

This payment against the mandate

Check	Payment	Mandate	Rule
✓ token	0x5fbd…0aa3	0x5fbd…0aa3	G07 / C5
✓ payee ∈ vendorPayees	0x2000…0004	6 allowed	G10 / C5
✓ vendor ∈ vendors	0x1000…0004	6 allowed	G09 (C4 only)
✓ 0 < amount ≤ maxTx	4.00	25.00	G11 / C5
✓ tier	Allow	threshold 15.00	G13/G16 / C5
✓ deadline	2026-11-01 00:37:51 UTC	mandate expiry 2026-11-04 00:05:45 UTC	G12 / C5

Display only. The gateway (GW-1) and the wallet decide; this table restates their limits. The task-budget counter and the bucket depend on history and are not recomputed here.

Risk graph graph engine · py/interlock_gateway/graph.py

The same in-memory graph the gateway queries before it signs (rules G22 Block, G23 Review). Directed edges, shortest path to a known bad actor: the address itself or one edge away is Block, two or more is Review, none within 6 is Allow, an unreachable graph is Review. It knows only what its operator file says; Allow means “no known link”, not “safe”.

Vendor / walletContractKnown bad actorsource: passport (recorded at decision)

At decision time (attested in the passport)

BLOCK payee 0x2000…0004 · direct edge to a known bad actor

Hooli Payouts 0x2000…0004—SWEEPS_TO→Known Bad Actor 0x0000…ad01

Live query not available: this is a static deployment with no graph service. The result above is the one the gateway recorded at decision time.

Labels come from the operator's graph file; payee and vendor names elsewhere on this page come from the address book.

What the agent read demo context · not attested

mail-4001 · email: ar@hooli.example

Hooli compression licence, INV-4001, 4.00 USDC.

Raw passport

Show the JSON exactly as issued (4,289 canonical bytes)

{
  "body": {
    "kind": "interlock.verification-passport",
    "version": "1",
    "chain": {
      "chain_id": "84532",
      "wallet": "0xe7f1725e7734ce288f8367e1bb143e90bb3f0512",
      "registry": "0x5fc8d32690cc91d4c39d9d3abcbd16989f875707"
    },
    "issuer": "0xbb50b6623454712be08befecb0b78b9ec7d16086",
    "issued_at": "1793491671",
    "request": {
      "tx": {
        "to": "0xe7f1725e7734ce288f8367e1bb143e90bb3f0512",
        "data": "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",
        "value": "0"
      },
      "claim": {
        "invoice": {
          "invoice_id": "INV-4001",
          "vendor": "0x1000000000000000000000000000000000000004",
          "payee": "0x2000000000000000000000000000000000000004",
          "amount": "4000000",
          "memo": "Compression licence"
        }
      }
    },
    "decoded": {
      "payment": {
        "to": "0x2000000000000000000000000000000000000004",
        "token": "0x5fbdb2315678afecb367f032d93f642f64180aa3",
        "amount": "4000000",
        "nonce": "9",
        "deadline": "1793493471",
        "invoiceHash": "0x9218dd8f8635497f0f2d49311fe3b2d5ccfbfd3053d496c598af78a99a1fdaf7"
      },
      "approver_sig": ""
    },
    "mandate": {
      "schema_version": "3",
      "primaryType": "Mandate",
      "domain": {
        "name": "InterlockWallet",
        "version": "1",
        "chainId": "84532",
        "verifyingContract": "0xe7f1725e7734ce288f8367e1bb143e90bb3f0512"
      },
      "message": {
        "vendors": [
          "0x1000000000000000000000000000000000000001",
          "0x1000000000000000000000000000000000000002",
          "0x1000000000000000000000000000000000000006",
          "0x1000000000000000000000000000000000000003",
          "0x1000000000000000000000000000000000000004",
          "0x1000000000000000000000000000000000000005"
        ],
        "vendorPayees": [
          "0x2000000000000000000000000000000000000001",
          "0x2000000000000000000000000000000000000002",
          "0x2000000000000000000000000000000000000006",
          "0x2000000000000000000000000000000000000003",
          "0x2000000000000000000000000000000000000004",
          "0x2000000000000000000000000000000000000005"
        ],
        "token": "0x5fbdb2315678afecb367f032d93f642f64180aa3",
        "maxTx": "25000000",
        "reviewThreshold": "15000000",
        "taskBudget": "80000000",
        "bucketCapacity": "40000000",
        "refillRate": "99",
        "maxValidity": "259200",
        "expiry": "1793750745",
        "chainId": "84532",
        "version": "2",
        "nonce": "2",
        "issuedAt": "1793491545"
      },
      "digest": "0x243484de24d070cf8b343b5a8e0cbc2e685c698170d0e2dd44547f74465daae1",
      "signature": "0x0216958bdf56a2d43908c273f856ba393395789e1bfe1e2c96fd4b4ce2a0b19d6f08bc267c5502b9695db25e2f20495537f49b880c3974e2e691027eb2c96af11c"
    },
    "digests": {
      "mandate": "0x243484de24d070cf8b343b5a8e0cbc2e685c698170d0e2dd44547f74465daae1",
      "payment": "0xad4b6917b6c2a1bbe2a179afebfed52ed5f68b697ad24bc4b5cf2038df47e2af",
      "invoice": "0x9218dd8f8635497f0f2d49311fe3b2d5ccfbfd3053d496c598af78a99a1fdaf7"
    },
    "verdict": {
      "rule_id": "G22",
      "rule": "GRAPH_RISK_BLOCK",
      "decision": "Block",
      "deciding_layer": "gateway",
      "outcome": "Blocked",
      "explanation": "BLOCKED. Risk graph: the payee Hooli Payouts (0x2000…0004) has a direct edge to a known bad actor: Hooli Payouts -> Known Bad Actor. The gateway will not pay an address linked this closely to a known bad actor. What the transaction does: pay 4.00 mUSDC from the Interlock wallet to Hooli Payouts (0x2000…0004), for invoice \"INV-4001\" (agent-supplied) from Hooli (0x1000…0004). This is at or below the 15.00 mUSDC review threshold, so no approver signature is needed. The payment expires at 2026-11-01 00:37:51 UTC.",
      "detail": "the payee Hooli Payouts (0x2000…0004) has a direct edge to a known bad actor: Hooli Payouts -> Known Bad Actor",
      "wallet_error": null
    },
    "execution": null,
    "graph": {
      "address": "0x2000000000000000000000000000000000000004",
      "verdict": "Block",
      "hops": "1",
      "path": [
        {
          "address": "0x2000000000000000000000000000000000000004",
          "kind": "wallet",
          "label": "Hooli Payouts",
          "via": null
        },
        {
          "address": "0x00000000000000000000000000000000000bad01",
          "kind": "bad_actor",
          "label": "Known Bad Actor",
          "via": "SWEEPS_TO"
        }
      ],
      "reason": "direct edge to a known bad actor",
      "path_text": "Hooli Payouts -> Known Bad Actor",
      "available": true,
      "role": "payee",
      "summary": "the payee Hooli Payouts (0x2000…0004) has a direct edge to a known bad actor: Hooli Payouts -> Known Bad Actor"
    }
  },
  "passport_hash": "0x3b9dc8e945493b36ee6d97294302e8b76902af3432196011f6ef7d9faa2c8d09",
  "anchor": {
    "kind": "attest",
    "registry": "0x5fc8d32690cc91d4c39d9d3abcbd16989f875707",
    "attester": "0xbb50b6623454712be08befecb0b78b9ec7d16086",
    "tx_hash": "0x8640314af2b5c3220f9234954a4a3a0795fb9150b1dbd5ed7060b9006ac8aa7b",
    "block_number": "34"
  }
}