Visa TAPReplay of the main run, 3 Nov 11:16–11:33 UTC · test money · real Claude decisions
The agent signs before it pays
Agent signsSourcing · Claude Haiku
Both signatures verifiedby our layer, in this run
€45.00 paidAirwallex card ····1423
€45.00 declinedby Airwallex · TAP run · 2 Nov
The card's limit still holds: over it, Airwallex declines.
Visa: each agent signs its card checkout with Visa's Trusted Agent Protocol (TAP), so a merchant can check which agent is buying. Visa's public reference verifier accepted the signatures in a separate test on 2 November; the merchant is ours.
Entered for the Visa Award (organisers confirmed one project may enter both Visa and Metal; whether TAP counts as Visa tooling is still being confirmed with Visa).
The live proof
- In this run: the Sourcing agent (Haiku) bought the packwise-pro plan at Packwise, EUR 45.00; our layer verified both TAP signatures (verified, verified); the agent's Airwallex card ····1423 was approved by Airwallex Airwallex 01a1a12f…
- TAP run · 2 Nov · test money: the Sourcing agent (Haiku) picked the card rail: Visa's reference proxy answered 200, our layer verified both signatures (verified, verified); the Airwallex card (brand as Airwallex returns it: VISA) was approved, EUR 19.99 Airwallex 01a19bfa… · read back with GET: PENDING
- TAP run · 2 Nov · test money: code tried one purchase over the card's limit: Visa's reference proxy answered 200, our layer verified both signatures (verified, verified); the Airwallex card (brand as Airwallex returns it: VISA) was declined by Airwallex (over the card's limit), EUR 45.00 Airwallex 01a19bfa… · read back with GET: FAILED
What this is, and is not
- In the TAP run, Packwise is a merchant we run (simulated); its checkout is served by our code behind Visa's reference proxy.
- Signature 1 follows Visa's Trusted Agent Protocol as Visa's reference proxy (github.com/visa/trusted-agent-protocol, commit 16d59bd, unmodified) reads it; signature 2 (body integrity over Content-Digest), the tag, window and payment checks are our own layer.
- In the TAP run, the agent registry is Visa's reference registry, self-hosted on localhost, with a test key made for this run: not Visa's directory, no approval by Visa of this agent.
- Card payments are Airwallex sandbox simulated authorisations.
- In the separate TAP run (2 November) no approval was asked for or given. In the main run the card buy came after the CFO approved P-0006 with Face ID, which raised the card's limit per purchase from EUR 30.00 to EUR 46.00.