Home

Permit wiki

Payment authority for AI agents. An agent never holds raw account access. It spends against a permit: an amount cap, a merchant allowlist, an expiry, and a revocation flag. Every decision, allowed or blocked, gets a hash-chained receipt.

• Repo: marsojuji-cmyk/permit (public, MIT)
• Built for the PayPal AI Hackathon. Deadline: Nov 12, 2026, 12:00 pm Pacific
• Owner: Marcus Richards

Last verified: commit 9900817 · 2026-10-07 (America/Edmonton) · python -m pytest -q → 170 passed (mock rail) · python demo.py → exit 0, ledger chain VERIFIED (15 receipts)

Start here

If you want to…	Read
Understand the idea	Overview and Problem
See the exact authority rule	The Four-Clause Gate
Follow money from attempt to capture	Spend Pipeline
Run something in 10 seconds	Running the Demos
Call the service	HTTP API Reference
Know what is proven and how	Evidence Map
Know what it does not do	Production Boundaries

Status at a glance

Area	State at 9900817
Test suite (mock rail)	170 passed locally; CI ci run on this commit: success
Credential-free demo	demo.py and demo_sla_escrow.py run offline with no LLM
LLM-driven demos	demo_six_beat.py, demo_delegation.py, demo_approval.py require PERMIT_GROK_CLI (no default). Only demo_six_beat.py offers --replay of a transcript you recorded
PayPal sandbox	Client and runbook in the tree. No recorded sandbox run in the tree (README: "not yet recorded"). See Evidence Map
Hackathon package	Demo video and Devpost text not submitted. See Hackathon Submission Status