Put a compliance firewall on your agent
Register your own agent and give it a dedicated mandate — per-tx and daily limits, who it may pay, and what for. Every payment then runs those gates before settlement; over-reach, hijacks, impersonation, replays — all blocked before money leaves. All against the same live gateway.
① Register your agent
② Set this agent's mandate
③ Identity verification (KYC · optional but recommended)
Or: wire it in with the SDK, in three lines
import { createPayClient } from "@oceanalt/pay";
const oa = createPayClient();
// 注册 agent + 它自己的授权信封
const reg = await oa.register({ agentId: "my-bot", entity: "Acme (KYC)",
mandate: { maxUsdc: 5, dailyUsdc: 50, payees: ["0x…"], purpose: "buy-data" } });
// 通过防火墙付款(nonce/凭证自动处理)
const r = await oa.pay({ agentId: "my-bot", amountUsdc: 2, to: "0x…", purpose: "buy-data" });
r.decision === "allow" ? settle() : console.warn("被拦于", r.pillar, r.reason);
