Before money, data, or access changes, the proposed action must pass authority, scope, evidence, and proof checks.
Attestor sits between an AI-prepared operation and the system that would execute it. Prompts can guide behavior, but they cannot enforce it or stop an unsafe or unauthorized service call.
Nothing can execute yet: approval is unbound, scope is unchecked, and no service call has been made.
It can assemble a refund request from tools and text, but the right to execute must be checked outside the model.
`issue_refund / 380 USD` targets refund-service. The manager-free limit is 100 USD and approval is pending.
`refundService.issueRefund(...)` is the point where money could move, so the call has to wait.
The next request claims approval from text, but no bound approval exists.
Changing the shape of the request does not create authority, scope, or proof.
Action, amount, limit, approval state, evidence, scope, freshness, replay, tenant, and downstream service are evaluated together.
The amount is over limit, approval is pending, evidence is partial, scope is not bound, and both retries failed.
The customer-owned gate consumes the decision before the refund-service call and holds execution.
The downstream receipt records `0 service calls`; no payment side effect is produced.
The proposed refund, failed retries, checks, decision, gate result, and downstream receipt are recorded together.
Before money, data, or access changes, the proposed action must pass authority, scope, evidence, and proof checks.
Attestor sits between an AI-prepared operation and the system that would execute it. Prompts can guide behavior, but they cannot enforce it or stop an unsafe or unauthorized service call.
It can assemble a refund request from tools and text, but execution authority is checked outside the model.
Fake approval text and a changed refund shape still lack authority, bound scope, and proof.
The customer-owned gate consumes the decision before the service call.
0 service calls. No payment side effect is produced.
Proof receipt
Proof recorded before consequence.