The space
The space: who signs, what connects, what runs on its own.
Roles and rules that say who signs what, and connections that only read.
Who signs, and what an agent may do
Rules that say who signs what, and an agent with a fence of its own: a daily cap, allowed payees, never a signature.
Owner, admin, member, viewer and accountant each see their part, the signing rules say who can move money and from what sum, and an agent gets a fence of its own: a daily cap, allowed payees, and never a signature.
Security and privacy in depth →Who may do what, and what needs a signature?
0.4 USDC
26 USDC
Every dollar an agent moved, with a receipt that says which agent, whose it is, how much, to whom, and who decided it: the agent, a human, or a decision still pending on it.
The authority map · who can move money, and what holds them
Mira OseiOwner2 of 4 rule
Sam AdeyemiFinanceSigner
ops-runnerAgentWatch mode
Devices, the space journal, an IP allowlist, and It was me or Not me on every sign-in from a new device.
Connections, and the rules that run on their own
Connections that only read, and automations that tell a person: a balance below the line, a connection that stopped syncing.
Every connection reads where it reads, and says so when it breaks instead of showing last week's number. Automations watch the book on a schedule and tell a person: a balance below the line, a budget nearly spent, a connection that stopped syncing while you slept.
Accounts and rails in depth →What can we connect, and is it healthy?
Rules that watch the books and tell a person: once per period, never twice, and one broken rule cannot take the others down.
Questions
The questions that come first.
Which roles exist, and what can each do?
Owner, admin, member, viewer and accountant. A role decides which sections a person sees; the signing rules decide who can move money, from what sum, and how many signatures a payment of that size has to collect first.
What may an agent do in the space?
Only what its fence allows: a daily ceiling, allowed payees, a card fenced by merchant and a wallet whose balance is the worst case. It proposes and a person signs; once frozen, an agent cannot even read the book until someone lets it back in.
Are bank and exchange connections read only?
Yes. A bank connects through open banking or a statement, an exchange with a key that is refused if it can trade or withdraw, and a connection that breaks says so on the page instead of quietly showing a number from last week.
See it on your own books.
Thirty minutes: we connect an account, drop a real bill in, and close a month together.