x402 is the payment rail. AgentPay Guard is the authorization layer. Deterministic policy checks run before signing, and protected data is released only after independently verified settlement.
One real policy-authorized native-CSPR payment. Premium data was released only after independent Casper RPC verification.
Signing ran locally with a dedicated Testnet key. The hosted Vercel app never loads private keys or initiates spending. The Odra proof recorder is a separate existing on-chain proof path.
The hosted deterministic scenario shows policy ALLOW. The separate card above is public evidence of the real Testnet settlement.
Policy denial stops the signer. No transaction is constructed or submitted.
A consumed transaction cannot authorize another request, and no premium response is released.
An autonomous AI agent requests premium data from a protected resource.
The server responds with a PaymentRequirement — amount, merchant, requestHash, and expiry.
The agent checks its spending policy (merchant allowlist, per-payment max, total budget) and authorizes exactly one request-bound payment.
The real local Testnet path reconstructs authorization, verifies its signature, confirms TransactionV1 through RPC, and only then returns premium data. Hosted scenarios remain deterministic demos.
pnpm demo:mcp:judge