A Signed Mandate Is Not Authorization: A Rust SDK for AI-Agent Transactions

Description and use

<h1> A Signed Mandate Is Not Authorization: A Rust SDK for AI-Agent Transactions </h1> <p>An AI agent submits a $50 transfer request.</p> <p>Its mandate has a valid Ed25519 signature. The signed scope permits transfers up to $100 per transaction. The requested amount is below that limit.</p> <p>Would you authorize the payment?</p> <p>Not yet.</p> <p>The signature and the amount check establish useful facts. Neither establishes whether the delegation has been revoked, whether the agent has already exhausted a cumulative budget, or whether the request has been processed before.</p> <p>That disti

Problem

<h1> A Signed Mandate Is Not Authorization: A Rust SDK for AI-Agent Transactions </h1> <p>An AI agent submits a $50 transfer request.</p> <p>Its mandate has a valid Ed25519 signature. The signed scope permits transfers up to $100 per transaction. The requested amount is below that limit.</p> <p>Would you authorize the payment?</p> <p>Not yet.</p> <p>The signature and the amount check establish useful facts. Neither establishes whether the delegation has been revoked, whether the agent has already exhausted a cumulative budget, or whether the request has been processed before.</p> <p>That disti

Outcome

<h1> A Signed Mandate Is Not Authorization: A Rust SDK for AI-Agent Transactions </h1> <p>An AI agent submits a $50 transfer request.</p> <p>Its mandate has a valid Ed25519 signature. The signed scope permits transfers up to $100 per transaction. The requested amount is below that limit.</p> <p>Would you authorize the payment?</p> <p>Not yet.</p> <p>The signature and the amount check establish useful facts. Neither establishes whether the delegation has been revoked, whether the agent has already exhausted a cumulative budget, or whether the request has been processed before.</p> <p>That disti

Evidence

A Signed Mandate Is Not Authorization: A Rust SDK for AI-Agent Transactions

Source