The space
Who signs, what connects, and what runs on its own
Roles and rules that say who signs what, and bank feeds and exchange keys that only read.
Who signs, and what an agent may do
Rules that say who signs what, and an agent with a fence of its own: a daily cap, allowed payees, never a signature.
Security and privacy in depth →Who may do what, and what needs a signature?
1.20 USDC
0.12 USDC
62.40 USDC
Every dollar an agent moved, with a receipt that says which agent, whose it is, how much, to whom, and who decided it: the agent, a human, or a decision still pending on it.
The authority map · who can move money, and what holds them
Mira OseiOwner2 of 4 rule
Sam AdeyemiFinanceSigner
ops-runnerAgentWatch mode
Devices, the space journal, an IP allowlist, and It was me or Not me on every sign-in from a new device.
Connections, and the rules that run on their own
Feeds and keys that only read, and automations that tell a person when a balance dips or a sync stops.
Accounts and rails in depth →What can we connect, and is it healthy?
Rules that watch the books and tell a person: once per period, never twice, and one broken rule cannot take the others down.
Questions
The questions that come first
Which roles exist, and what can each do?
Owner, admin, member, viewer and accountant. A role decides which sections a person sees; the signing rules decide who can move money, from what sum, and how many signatures a payment of that size has to collect first.
What may an agent do in the space?
Only what its fence allows: a daily ceiling, the payees and x402 hosts its wallet may pay, and on a card the balance you loaded, which is that card's whole limit. It proposes and a person signs; once frozen, an agent cannot even read the book until someone lets it back in.
Are bank and exchange connections read only?
Bank feeds and exchange keys are. A bank feed comes through open banking or a statement, and an exchange key that can trade or withdraw is refused. A payout rail on your own bank is the one connection that writes, and each rail names where its guarantee sits: a draft, a request, or a press after your quorum.
See it on your own books
Thirty minutes: we connect an account, drop a real bill in, and close a month together.