MandateShield Payment Authority Agent bronze

Project Agent Payment Fields

Map documented AP2 terminal closed-payment fields, x402 v2 PAYMENT-REQUIRED fields, or an explicitly profiled MPP Payment charge challenge into a deterministic purchase envelope. X402 and MPP require exact source-bound canonical payee identity rather than merchant_id alone. Evidence references are not independently verified, projection_fields_valid is not full protocol conformance, and the bridge is never executable.

• Normalize this x402 v2 PAYMENT-REQUIRED offer before authority signing.
• Turn this MPP charge challenge into a deterministic purchase envelope.

Verify Cryptographic Payment Authority

Fail-closed production verification for JWS, an AP2-shaped closed-payment SD-JWT projection with RFC 9901 KB-JWT, or normalized TAP-shaped RFC 9421-style evidence. Full AP2 and Visa TAP chain/trust-store processing remains external. A qualifying live ALLOW returns a signed decision receipt plus a short RESERVED authorization. It never executes payment and exposes no PROCESSOR transition, redemption or reporting action. Every account created at or after 2026-07-26T12:01:24.000Z must use an external gateway that CONSUMEs with an exact provider binding; only older accounts retain legacy unbound compatibility. Provider-bound CONSUME creates a ProviderSubmission record and signed permit while submission remains forbidden. An execution service must freshly redeem it online before one operation, then report the stable provider submission and reference. The caller report or webhook is only a hint; configured Stripe API or canonical x402 chain verification must independently confirm a terminal outcome before autonomou

• Verify that this AP2-shaped closed-payment projection binds the final payee and amount.
• Validate fresh normalized TAP-shaped evidence before allowing checkout.

Analyze AI Payment Policy

Analyze a normalized purchase envelope against supplied policy facts. Returns ALLOW, REVIEW or BLOCK with exact findings, but this v1 result is non-executable and enforcement_authorized is always false.

• Check whether this $124.90 rail purchase stays inside a $150 AP2 mandate.
• Block a checkout when the final merchant differs from the approved seller.

MandateShield Agent Payment Authority Plugin

Auditable ChatGPT and Codex plugin package for non-executable payment-authority analysis and optional strict signed-authority reservation before buying, subscribing, transferring value, or invoking paid tools. Neither the plugin nor its MCP tools mediate provider egress, redeem permits, submit provider operations, or execute payments.

MandateShield AI Payment Authority MCP Server

Remote MCP server for non-executable payment-policy analysis, non-executable AP2/x402/MPP field projection, and strict signed-authority reservation before a separate execution-integrity boundary. It does not expose PROCESSOR transitions, execution-permit redemption, provider submission, or payment execution.

MandateShield PostgreSQL DurableGatewayJournal

First-party customer-side PostgreSQL implementation of the Gateway v2 durable begin, primary-read and compare-and-set contract. Database credentials and journal rows stay in customer infrastructure. The readiness check does not attest routing, replication or failover, and split-brain writers are unsafe.

MandateShield Payment Authority A2A Agent

A2A agent interface for payment-protocol field projection, policy analysis, and strict signed-authority verification. A qualifying strict result creates only a RESERVED authorization; the interface never executes payment and exposes no PROCESSOR transition, permit-redemption, or provider-submission action.

MandateShield Strict Lifecycle Sandbox

Zero-account POST endpoint that runs one isolated, request-local strict lifecycle with ephemeral authority, provider and artifact keys. It demonstrates challenge, reservation, one fresh permit claim, a separately signed simulated provider assertion, and terminal receipt verification without production credentials, caller-independent provider evidence, external organizations, outbound provider calls or money movement.

MandateShield Proof Network

Public list of signed externally bound self-reports. MandateShield verifies control of an HTTPS domain or an exact public GitHub repository commit and the integrity of claimant-supplied offline-vector outputs; it does not execute the claimant implementation, count entries as users or installations, independently verify conformance, or issue certification.