Mandate Chain as Evidence

Signed Intent, Cart, and Payment mandates verified offline before authorization

Mandate Chain as Evidence Signed Intent, Cart, and Payment mandates verified offline before authorization 01 / Authorize 02 / Sign chain 03 / Verify 04 / Decide 05 / Record User Key · signing authority · 01 / Authorize · private key User Key signing authority private key Intent Mandate · scope + limits · 02 / Sign chain · VC Intent Mandate scope + limits VC Cart Mandate · items + price · 02 / Sign chain · VC Cart Mandate items + price VC Payment Mandate · method + amount · 02 / Sign chain · agent flag Payment Mandate method + amount agent flag Verifier · checks proofs · 03 / Verify · offline Verifier checks proofs offline Revocation Registry · status + expiry · 03 / Verify · status list Revocation Registry status + expiry status list Authorization · approve charge · 04 / Decide · decision Authorization approve charge decision Reject · deny + log reason · 04 / Decide · branch Reject deny + log reason branch Audit Store · signed chain · 05 / Record · non-repudiable Audit Store signed chain non-repudiable signs intent VC proof scope constrains linked claim price locked linked claim submit chain 3 signed mandates revocation + expiry status lookup all proofs valid authorized persist chain evidence invalid or revoked fail closed Legend primary data policy / PII async batch data store

Signed Chain

  • • One user key signs a linked Intent, Cart, and Payment mandate
  • • Each mandate narrows the last: scope, then exact price, then amount
  • • The chain names who authorized what, not just that a call happened

Verification Gate

  • • Proofs are checked offline without calling the issuer
  • • Revocation and short expiry are looked up on every attempt
  • • Failed proofs fail closed to a rejected, logged branch

Evidence

  • • Approve and reject both persist the signed chain
  • • Stored proofs are non-repudiable in a later dispute
  • • The audit store answers 'my agent did it' with cryptography