Review the terms below. Approving signs a scoped mandate with this device's key — the agent cannot exceed what you sign.
maximum amount the agent may act within
{"action_category":"purchase","agent":"demo-agent/1","amount_ceiling":{"currency":"USD","value":"100.00"},"iss":"x401-wallet:0YAwQWEdV0cYIGxe","merchant":"https://merchant.demo","nonce":"s4EW5yDWzyeP9tR7mx2zrQ","not_after":1794419942,"not_before":1794419342,"request_id":"demo-purchase-v1-2pwLaZ_Z","type":"x-x401ext-mandate/v1"}
On approval, the JSON above is signed as-is (canonical form) with this device's Ed25519 key as mandate type x-x401ext-mandate/v1. If the agent alters the amount, recipient, or any other term, the signature no longer validates.
Scan the code to open this exact approval on another device. Same terms, same signature.