AGENTIC COMMERCE · SETTLEMENT-FIRST EXECUTION

One payment in.
Many protected resources out.

CPMM-SHIELD lets an AI agent authorize one bounded x402 payment. The shield settles that payment first, then pays only trusted downstream providers from an isolated treasury, validates every response, and returns one signed receipt.

SIMULATED CONTENT (OWNED)PROVIDER CONTENT (External ALGO Price Feed)REAL TESTNET PAYMENT (x402 PATH; LIVE EVIDENCE REQUIRED)

UPSTREAM PAYMENT—USDC

DOWNSTREAM—USDC

REMAINING—BUDGET

TRUSTED PROVIDERS0/3COMPLETED

RESPONSE FIREWALL0/3PASSED

TREASURYREADYVBYOKQL…QB4MY

CONTROL PLANE

Execution flow

READY

01AI clientTrusted IDs + bounded inputs

POLICY

02HTTP 402HMAC-bound quote

SETTLE

CPMM-SHIELDVerify · settle · orchestrate

TREASURY

WeatherWaiting

Company lookupWaiting

External ALGO Price FeedProvider content · waiting

FIREWALL

06Signed receiptValidated aggregate result

JOB COMPOSER

Run a protected job

ASA 10458941

The browser submits only trusted resource IDs, provider-specific inputs, and payment ceilings. Provider URLs, response schemas, network, asset, and recipients remain server-controlled. Policy runs before any payment challenge.

Ready for an intent.No payment is requested until policy validation passes.

SIGNED OUTPUT

Signed receipt

NO RECEIPT

{
  "status": "awaiting_settlement",
  "message": "Run a quote or execute the paid CLI flow."
}

OBSERVABILITY

Audit trail

TIME / EVENTRESOURCEPAYMENT