A limit the agent cannot talk past
Sourcing agentClaude Haiku sets the buy policy
0.04 refusednothing settles
New cap 0.04after Face ID 1 of 2 → 2 of 2
86payments on chain
1refused by Metal at the cap
2mandates replaced
0.69test USD swept after finality
Each agent pays from the company's Metal account under its own mandate; a payment over the cap does not settle. 86 on Metal = the 87 inside the limits less the 1 card buy; 87 inside the limits = 41 sales + 41 supplier purchases + 3 refunds + 1 sweep + 1 card buy.
The live proof, with every tx
- Refused by Metal: Stockline at 0.04, over the 0.03 cap (
mandate_cap_exceeded); nothing moved. tx 0x2e92…1871 ↗Defense in depth: Purser normally refuses before signing. To prove the rail itself enforces the limit, one purchase was let through to Metal — Metal refused it; nothing moved. - Refused by Metal: Stockline, the old mandate was revoked by its replacement; nothing moved
- New mandate on chain after two signatures: Treasury agent, cap 2.00, budget 2.00 tx 0x789a…ebbc ↗
- New mandate on chain after two signatures: Sourcing agent, cap 0.04, budget 14.00 tx 0x2a91…e790 ↗
- A mandate per agent, on chain: Sourcing agent: 0.04 a payment, 14.00 in total, one payee; Support agent: 0.10 a payment, 4.00 in total, one payee; Treasury agent: 2.00 a payment, 2.00 in total, one payee 0xb7ef08bb…44ad ↗
- Paid per request (x402), with a signed order: 41 stock checks sold, each paid under the customer's mandate and settled by Metal's facilitator 0x2cc5a16e…2fc7 ↗
- The agent buys from its supplier: 41 purchases, each under the Sourcing agent's mandate 0x64d22177…4c7d ↗
- Refunds as mandate pulls: 3 refunds, 0.15 test USD, back to the paying account only, each under its own payment id 0xe4bf7962…c89d ↗
- Sweep, after finality: earnings moved once their block (14153316) was finalized (14153325); booked at Airwallex exactly once 0x86936a5b…ccb4 ↗
The Metal features we use, and their docs
- A mandate per agent: Mandates ↗
- Replace and revoke, after Face ID: Binding, replacing and revoking ↗
- Pay per request (x402), with a signed order: x402 on Metal ↗ · Signed orders ↗
- Settled by Metal's facilitator, or refused: Facilitator ↗ · Refusal reasons ↗
- Refunds as mandate pulls: How a payment is checked ↗ · Payouts ↗
- Sweep after finality: Settlement and finality ↗
- Four eyes on chain: Smart account ↗
What is simulated
- Test money on Metal testnet only.
- Stockline, the supplier, and Summit, the customer whose agent buys from us, are simulated; their payments are real testnet transactions.