Add signa-spend skill: safely fund a Bankr agent (spend mandates + x402)#470
Open
codexvritra wants to merge 1 commit into
Open
Add signa-spend skill: safely fund a Bankr agent (spend mandates + x402)#470codexvritra wants to merge 1 commit into
codexvritra wants to merge 1 commit into
Conversation
The agentic-commerce trust rail as a companion to the signa skill. A human wallet-signs a bounded budget (limit + per-tx cap + expiry); the agent records each spend against it (capped, append-only, EIP-191 signed), pays providers over x402 with a verifiable receipt, and wallet-signs a budget request when it runs dry. The brain can be metered the same way. Ships with the same security model as the signa skill (untrusted-input boundaries, expected-signer verification, fail-closed, least-privilege). SIGNA never holds funds — signed authorization, not custody.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Companion to the signa skill (thanks for merging that one 🙏). This adds signa-spend — the agentic-commerce trust rail, so a Bankr agent can be funded and spend on its own safely.
The flow, all wallet-signed and keyless:
409with exactly how short it is.mandate_id) — it pays for its own inference within the budget and stops instead of overspending.Security: ships with the same model as the signa skill — every response is treated as untrusted data, signatures verified against an expected-signer allowlist (grantor / agent / attestor / gateway / brain), fail-closed on mismatch, ±5min timestamp window, replay protection, least-privilege (deny-by-default, only a human signs a mandate). The only wallet ops are an EIP-191
personal_signof a readable string and an EIP-3009 authorization with an explicit amount/recipient/expiry — never a blind transaction. SIGNA never holds funds; settlement is the permissionless x402 step.One file:
signa-spend/SKILL.md+ a README row. Every endpoint is live on prod and was verified end-to-end. Happy to tweak anything.