TRUSTY.bot

Developer Documentation & Protocol Specs

Architectural reference, KYA (Know Your Agent) specifications, and REST API documentation for autonomous intent authorization.

The Intent Authorization Lifecycle

Autonomous economic agents operating corporate payment rails require deterministic boundaries. Traditional financial controls check whether a corporate card has sufficient credit limit; TRUSTY verifies whether the proposed purchase matches the human instruction before the transaction is executed.

The 5-Stage Verification Sequence

  1. Mandate Formulation & Cryptographic Hash: The human principal issues a procurement instruction (e.g. “Buy 20 laptops, min 16GB RAM, max $20,000 for Miami HQ”). TRUSTY produces a structured mandate and signs a SHA-256 digest: H(Mandate).
  2. Action Proposal & Cart Evidence Capture: The AI purchasing agent compiles a cart and submits itemized SKU evidence, vendor credentials, pricing, and destination details.
  3. Deterministic Intent Evaluation: TRUSTY cross-references every criterion with a strict MATCH | MISMATCH | UNKNOWN result. Price checks alone do not satisfy the check: staying under budget with incorrect quantities or specifications is immediately flagged.
  4. Human-in-the-Loop Exception Routing: Discrepancies or unverified vendors are pushed to the corporate review queue. Finance leads can inspect the deviation, approve an explicit one-time exception, or reject the purchase.
  5. Cryptographic Decision Binding & Settlement: Approvals are bound to H(Mandate) || H(Cart). Corporate payment cards (Brex, Ramp, Slash) execute the checkout, and TRUSTY records an immutable audit trail for accounting reconciliation.