AICOPay
MVPBounded, revocable spending authority for AI agents.
A protocol that lets a person grant their agent a limited right to spend — capped by amount, period and merchant category — and take it back at any moment.
- Primitive
- Signed, bounded, revocable mandate
- Bounds
- Amount · period · merchant category
- Invariant
- The agent proposes, the human decides
- Test suite
- Full protocol backend, green
Overview
The moment an agent can act on your behalf, the question stops being capability and starts being authority. AICOPay is the answer to a narrow, concrete version of that question: how does someone say "you may spend up to €50 a month at pharmacies, until I say otherwise" in a way a machine can enforce and a court could read?
The protocol issues a signed mandate with explicit bounds. Every spend request is checked against that mandate by a policy engine; borderline cases escalate to the human instead of resolving themselves; anomalous patterns trigger protective braking; revocation is immediate and total. Replay protection and key-compromise handling are part of the design rather than a later hardening pass.
One boundary is deliberate: this is merchant purchase authority, not person-to-person transfer. That choice keeps the protocol on card rails that already exist, without pretending to be a bank.
Capabilities
Mandate service
Issue, inspect and revoke spending mandates. An agent cannot widen its own bounds — the operation does not exist.
Policy engine
Deterministic evaluation of each request against the mandate, with human escalation for anything on the edge.
Anomaly braking
Unusual spend patterns stop the agent and surface a decision to the person rather than optimising through it.
Audit log
Every request, decision and revocation recorded in a form built for dispute resolution.