The Trust Gate checks whether an autonomous customer is still the identity recorded in this browser demonstration. The suite adds signed cross-chain login, scoped decision policies, idempotent order preflight and signed change notifications. Production merchants must add authenticated tenant accounts and call order evaluation from their backend.
Approvals are created in the Merchant Trust Gate and stored in this browser. Their checksum detects edits but does not authenticate a real merchant tenant; production integrations must use signed approvals and merchant authentication.
Issue a five-minute, single-use challenge bound to the merchant, token, identity rail and approval hash. Sign it externally with the registered key.
Create a decision-only mandate after successful authentication. It never moves money.
Evaluate an order against the active mandate. This returns a receipt; the merchant checkout decides whether to proceed.
Human confirmation cannot be self-asserted by browser input. Orders at or above the threshold return human_confirmation_required for the merchant backend to handle.
Preview a safe webhook subscription. Actual registration is administrator-gated to prevent the public endpoint becoming an SSRF or spam relay. Deliveries are HMAC-SHA256 signed, re-resolve DNS, reject private targets and never follow redirects.
const client = new GregersMerchant.MerchantClient();
const decision = await client.checkoutGuard({
approval,
mandateId,
order: { amount: "42.50", asset: "EURR", items }
});
// Throws MerchantDecisionError unless both identity continuity
// and the purchasing mandate return "accept".