filippoplesca3-wq/MandateAgent

Signed spending authority for AI agents on PayPal.
Agent Mandate lets an AI agent buy things for a person without ever holding the
wallet. The human signs a scoped, expiring, revocable mandate — total budget,
per-payment ceiling, merchant allowlist and an approval threshold — and every
PayPal tool call the model makes passes through a deterministic guard that
resolves the real order amount and merchant, checks it against the signed claims,
records the decision in an append-only ledger, and refuses anything outside the
bounds. The model can be prompt-injected, confused or simply wrong; the mandate
still holds. The hosted demo replays a real Gemini run, and a judge can press
Run live with Gemini to watch the real model run now against simulated
PayPal. The local live path creates and captures real PayPal sandbox orders.
The console after one recorded Gemini run: $24 allowed, $45 escalated and
approved by a human, $99 denied, and every decision in the ledger.
| Live demo | https://agent-mandate.onrender.com (replace after deploy) |
| Video (under 3 min) | https://youtu.be/... (placeholder — public YouTube link) |
| Source | https://github.com/filippoplesca3-wq/MandateAgent |
| License | MIT |
## Judge in 90 seconds
1. Open the hosted demo and press Play recording. The header says
replay; the banner names the model and the capture date. No key, no API
calls. If the instance is asleep, npm ci && npm run demo serves the same
recording at http://localhost:3001.
2. Or run the model live. Press Run live with Gemini in the banner. The
server runs a real Gemini agent against simulated PayPal in a throwaway
store, then shows the fresh mandate, the guarded tool calls, the $99 denial
and a server-computed signature check. No PayPal credentials are involved
and no money can move. Runs are capped per day and per visitor.
3. Read the ledger. One run produces all three outcomes: $24 allowed, $45
escalated and approved, $99 denied at sketchy-deals.
4. Try a policy check. The Test a payment presets run a real dry-run
evaluation against the pre-seeded mandate.
5. Verify the mandate. Press Verify next to the signature. The console
shows SIGNATURE VALID · Ed25519 · recorded key: the mandate on screen
checks out against the key the recording was signed with.
6. Run the proof. npm ci && npm test (206 tests),
npm run verify:recording (offline Ed25519 check, no server),
npm run check:demo -- (audits the demo's own claims) and
npm run check:live (real PayPal sandbox + Gemini).
7. Go deeper: architecture,
security model, Devpost copy,
demo script.
If the hosted instance is asleep, the first request can take 30–60 seconds. The
Render blueprint deploys a fresh copy with no credentials, and
npm run demo runs the recording locally with no credentials at all.
## How PayPal is used
Every spend goes through the real PayPal Agent Toolkit (47 tools exposed by
@paypal/agent-toolkit), not a hand-written HTTP wrapper.
The live path creates and captures real sandbox orders: create_order →
payer approval in the browser → pay_order → get_order.
The browser checkout uses the PayPal JS SDK v6 with the sandbox client id;
only the public client id reaches the browser.