Try it yourself
Sign with your own Face ID
A test world of your own for one hour. An agent proposes two payments; rules in code check them. One is blocked by a rule and has nothing to sign. The other waits for a person: you sign the hash of its exact terms with a passkey you make now, and the server verifies it.
1Open your test world
Stand-in executors only, like the Scenario Lab: no Airwallex, Metal or Claude call, no money. It is deleted after one hour.
- World
- Test balance
- Reserve floor
- An agent pays alone up to
- Deleted in
2Make a test passkey
Face ID, Touch ID, Windows Hello, a security key, or your phone by QR code, within ten minutes. No name or e-mail: a random id, kept on your device as “Purser test passkey” for this site. It opens this test world and nothing else.
3The agent's proposals
Signed
The hash you signed (SHA-256 of the exact terms):
What is real here: your device's passkey signature over the hash, and the server's check of it (the same verifier as the CFO's passkey sign-in) against the public key your device registered. The server checks no attestation, so it cannot tell which authenticator made the key, and a key made in software would verify too; Face ID is what your device asks for, not something the server proves. What is not real: the world, its balance, the agent's words (fixed text) and the executor (a stand-in that only records). This world, its passkey record and its proposals live in their own store, apart from Northwind's: a test passkey is not enrolled anywhere else, so it can never approve a real proposal or sign in to the CFO's pages.