This document captures the cryptographic identity, policy decisions, and on-chain anchor for mandate pm_8a3f9c12. It is intended for use by internal compliance teams, external auditors, payment acquirers, and regulators who require traceability of agent-initiated actions.
The agent, user, and merchant identities involved, and the cryptographic envelope.
| Mandate ID | pm_8a3f9c12 |
|---|---|
| Mandate kind | PaymentMandate |
| Issuing agent | ChatGPT |
| End user | eunice@gmail.com |
| User intent (scope) | Buy 2× Espresso Roast under $50 |
| Amount cap | $47.20 USD |
| Signature algorithm | ECDSA-P256 |
| Signature preview | 0xb9ae6a4666a85ffd…4ba7299a |
| Issued at (UTC) | 2026-05-14T15:28:45.958Z |
Sill attests that the decision trace recorded in §3 of this document was produced by the Sill policy engine at the time the mandate was evaluated, and has not been modified since. The trace reflects the rules that were enabled in the merchant's policy configuration at the moment of evaluation.
The cryptographic anchor in §5 references an immutable on-chain record. Anyone with access to the indicated chain may independently verify the anchor's existence and contents.
Sill does not attest to the lawfulness of the underlying transaction, the fitness of the merchant's policy, or compliance with any specific regulation. Those determinations require additional review beyond this document.
Every input, governance check, and output produced when the mandate was evaluated. Each row cites the specific Sill rule (e.g. r01) that fired or was satisfied.
| PHASE | RULE | DETAIL | TIMESTAMP | VERDICT |
|---|---|---|---|---|
| INPUT | — |
Agent request received
ChatGPT → POST /agent/intent
{ "scope": "Buy 2× Espresso Roast under $50", "user_id": "eunice@gmail.com", "amount_cap_usd": 47.2 }
|
00:32:14.000 | RECEIVED |
| CHECK | r01 |
Agent identity verification
ECDSA-P256 signature valid · agent on AP2 verified registry
signature.alg = ECDSA-P256 signature.kid = chatgpt_key_2026 registry.match = true registry.source = ap2-verified-registry-mainnet |
00:32:14.018 | PASS |
| CHECK | r10 |
Scope authorization
Requested action falls within agent's published capabilities
requested_skill = "checkout" allowed_skills = ["browse","quote","checkout","refund_request"] user_intent_match = true verdict = pass |
00:32:14.024 | PASS |
| CHECK | r07 |
Spend cap enforcement
$47.20 evaluated against policy thresholds
request.amount = 47.2 policy.cap_per_tx = 100 policy.cap_daily = 200 user.daily_spend = 18.88 verdict = pass |
00:32:14.031 | PASS |
| CHECK | r11 |
Adversarial input scan
Tokens scanned for prompt injection · unicode tag smuggling · instruction override
tokens_scanned = 124 unicode_tag_chars = 0 role_override_attempt = false verdict = pass |
00:32:14.042 | PASS |
| OUTPUT | — |
Mandate issued and signed
PaymentMandate produced, jointly signed, anchored on-chain
mandate.id = "pm_8a3f9c12" mandate.kind = "PaymentMandate" signature = "0xb9ae6a4666a85ffd…4ba7299a" anchor.chain = solana-mainnet anchor.tx = cnft_4f2a8e1d anchor.block = 287402198 http_status = 200 |
00:32:14.058 | PASS |
Each Sill rule maps to one or more public-domain controls. Mappings reflect Sill's reading of the applicable framework; certification under any framework requires conformity assessment by the relevant accredited body.
| RULE | AP2 v1 | NIST AI RMF 1.0 | ISO/IEC 42001:2023 | OWASP |
|---|---|---|---|---|
| r01 | §4.2 Agent identity | GOVERN-1.1, MEASURE-2.7 | A.6.2.4 | API2:2023 |
| r07 | §5.2 Spend constraint | MANAGE-2.2 | A.7.4.1 | — |
| r10 | §5.3 Scope auth | MANAGE-2.3 | A.7.3.2 | LLM08:2025 |
| r11 | §6.4 Input integrity | MEASURE-2.6 | A.7.4.3 | LLM01:2025 |
On-chain reference for the mandate signature. Independently verifiable on the indicated chain.
Verification: query the Solana RPC for transaction cnft_4f2a8e1d
and confirm the embedded mandate hash matches §3 of this document.
A SHA-256 of the bundle contents. Any modification will alter this hash.
To verify, recompute SHA-256 over the canonical JSON form of this bundle (available via the JSON export in the same panel). The hash above must match.