Skip to content

Fleet-scale agent commerce: treasury coordinator, channels, in-process signing, resumable audits - #378

Merged
bordumb merged 12 commits into
mainfrom
merchant-close
Jul 18, 2026
Merged

bordumb merged 12 commits into
mainfrom
merchant-close

Conversation

@bordumb

@bordumb bordumb commented Jul 18, 2026

Copy link
Copy Markdown
Contributor

Overnight recurve run closing the merchant-loop + monetization plans (auths side).

  • Fleet treasury coordinator (treasury serve): one cap across N gateway processes over TREASURY_URL, fail-closed to the local budget, signed {fleet, count, cumulative} checkpoints; verify-spend --treasury-checkpoints/--expect-cumulative cross-checks the trail.
  • Payment channels (channel open/close): metered capacity reservation, netted min(cumulative, capacity) close emitting a log_hash-cited settlement; rail legs env-gated, custody-never.
  • In-process session signing: first call per kind harvests the subprocess-signed commit as a byte template; later calls sign in memory (~5 s → ~4 ms per call). Fleet e2e: 8 agents, one root, one $1 cap, ~390 calls/s, all logs re-derived consistent.
  • Spend-log rotation (spend-log/<delegation>/<YYYY-MM>.jsonl) + export-spend-bundle one-shot publish + resumable audit (--resume-*, checkpoint: line).
  • Fleet-join under one shared root (AUTHS_MCP_AGENT_LABEL), clean-HOME git identity, teaching metered-amount-required refusal, async napi authenticatePresentation.

Proven by auths-site e2es (merchant loop 20/20, fleet throughput 21/21, both exit 0) under the federated recurve gate. Commits are unsigned (headless loop) — review, then sign/squash on merge.

🤖 Generated with Claude Code

bordumb added 8 commits July 18, 2026 09:41
… signed {fleet,count,cumulative} checkpoints, verify-spend cross-check

Auths-Id: did:keri:EB5cPHY0t-ejNC_rUzPS1dclTvd6kG-R9mQzjozCuGgd
Auths-Device: did:keri:EB5cPHY0t-ejNC_rUzPS1dclTvd6kG-R9mQzjozCuGgd
Auths-Anchor-Seq: 1
…er-delegation work namespaces, in-process session signing for per-call throughput

Auths-Id: did:keri:EB5cPHY0t-ejNC_rUzPS1dclTvd6kG-R9mQzjozCuGgd
Auths-Device: did:keri:EB5cPHY0t-ejNC_rUzPS1dclTvd6kG-R9mQzjozCuGgd
Auths-Anchor-Seq: 1
…mits the netted log_hash-cited settlement; rail legs env-gated, custody-never

Auths-Id: did:keri:EB5cPHY0t-ejNC_rUzPS1dclTvd6kG-R9mQzjozCuGgd
Auths-Device: did:keri:EB5cPHY0t-ejNC_rUzPS1dclTvd6kG-R9mQzjozCuGgd
Auths-Anchor-Seq: 1
…nes build the signing chain

Auths-Id: did:keri:EB5cPHY0t-ejNC_rUzPS1dclTvd6kG-R9mQzjozCuGgd
Auths-Device: did:keri:EB5cPHY0t-ejNC_rUzPS1dclTvd6kG-R9mQzjozCuGgd
Auths-Anchor-Seq: 1
…example

Auths-Id: did:keri:EB5cPHY0t-ejNC_rUzPS1dclTvd6kG-R9mQzjozCuGgd
Auths-Device: did:keri:EB5cPHY0t-ejNC_rUzPS1dclTvd6kG-R9mQzjozCuGgd
Auths-Anchor-Seq: 1
…runs off the Node event loop via spawn_blocking

Auths-Id: did:keri:EB5cPHY0t-ejNC_rUzPS1dclTvd6kG-R9mQzjozCuGgd
Auths-Device: did:keri:EB5cPHY0t-ejNC_rUzPS1dclTvd6kG-R9mQzjozCuGgd
Auths-Anchor-Seq: 1
…emits the one-shot verifier-ready bundle

Auths-Id: did:keri:EB5cPHY0t-ejNC_rUzPS1dclTvd6kG-R9mQzjozCuGgd
Auths-Device: did:keri:EB5cPHY0t-ejNC_rUzPS1dclTvd6kG-R9mQzjozCuGgd
Auths-Anchor-Seq: 1
…prefix and emits its checkpoint state

Auths-Id: did:keri:EB5cPHY0t-ejNC_rUzPS1dclTvd6kG-R9mQzjozCuGgd
Auths-Device: did:keri:EB5cPHY0t-ejNC_rUzPS1dclTvd6kG-R9mQzjozCuGgd
Auths-Anchor-Seq: 1
@github-actions

Copy link
Copy Markdown

Auths Commit Verification

Commit Status Details
57086948 ❌ Failed No signature found
12d3f338 ❌ Failed No signature found
3dbd92b5 ❌ Failed No signature found
dff1f705 ❌ Failed No signature found
86cf30e2 ❌ Failed No signature found
4a995c0d ❌ Failed No signature found
f22254b4 ❌ Failed No signature found
e4b05a63 ❌ Failed No signature found

Result: ❌ 0/8 commits verified


How to fix

Commit 57086948 has no Auths signature (no Auths-Id/Auths-Device trailer).

1. Install auths

macOS: brew install auths
Linux: Download from releases

2. One-time setup (creates your identity and configures Git)

auths init

3. Sign this branch and push

auths sign origin/main..HEAD
git push --force-with-lease

For CI to verify the signer, commit an identity bundle:

auths id export-bundle --alias main --output .auths/ci-bundle.json --max-age-secs 31536000

Quickstart →

Auths-Id: did:keri:EB5cPHY0t-ejNC_rUzPS1dclTvd6kG-R9mQzjozCuGgd
Auths-Device: did:keri:EB5cPHY0t-ejNC_rUzPS1dclTvd6kG-R9mQzjozCuGgd
Auths-Anchor-Seq: 1
@github-actions

Copy link
Copy Markdown

Auths Commit Verification

Commit Status Details
747f9cd6 ❌ Failed No signature found
57086948 ❌ Failed No signature found
12d3f338 ❌ Failed No signature found
3dbd92b5 ❌ Failed No signature found
dff1f705 ❌ Failed No signature found
86cf30e2 ❌ Failed No signature found
4a995c0d ❌ Failed No signature found
f22254b4 ❌ Failed No signature found
e4b05a63 ❌ Failed No signature found

Result: ❌ 0/9 commits verified


How to fix

Commit 747f9cd6 has no Auths signature (no Auths-Id/Auths-Device trailer).

1. Install auths

macOS: brew install auths
Linux: Download from releases

2. One-time setup (creates your identity and configures Git)

auths init

3. Sign this branch and push

auths sign origin/main..HEAD
git push --force-with-lease

For CI to verify the signer, commit an identity bundle:

auths id export-bundle --alias main --output .auths/ci-bundle.json --max-age-secs 31536000

Quickstart →

…verifies through them — no curve-specific names outside auths-crypto

Auths-Id: did:keri:EB5cPHY0t-ejNC_rUzPS1dclTvd6kG-R9mQzjozCuGgd
Auths-Device: did:keri:EB5cPHY0t-ejNC_rUzPS1dclTvd6kG-R9mQzjozCuGgd
Auths-Anchor-Seq: 1
@github-actions

Copy link
Copy Markdown

Auths Commit Verification

Commit Status Details
188713cf ❌ Failed No signature found
747f9cd6 ❌ Failed No signature found
57086948 ❌ Failed No signature found
12d3f338 ❌ Failed No signature found
3dbd92b5 ❌ Failed No signature found
dff1f705 ❌ Failed No signature found
86cf30e2 ❌ Failed No signature found
4a995c0d ❌ Failed No signature found
f22254b4 ❌ Failed No signature found
e4b05a63 ❌ Failed No signature found

Result: ❌ 0/10 commits verified


How to fix

Commit 188713cf has no Auths signature (no Auths-Id/Auths-Device trailer).

1. Install auths

macOS: brew install auths
Linux: Download from releases

2. One-time setup (creates your identity and configures Git)

auths init

3. Sign this branch and push

auths sign origin/main..HEAD
git push --force-with-lease

For CI to verify the signer, commit an identity bundle:

auths id export-bundle --alias main --output .auths/ci-bundle.json --max-age-secs 31536000

Quickstart →

bordumb added 2 commits July 18, 2026 13:38
Auths-Id: did:keri:EB5cPHY0t-ejNC_rUzPS1dclTvd6kG-R9mQzjozCuGgd
Auths-Device: did:keri:EB5cPHY0t-ejNC_rUzPS1dclTvd6kG-R9mQzjozCuGgd
Auths-Anchor-Seq: 1
Auths-Id: did:keri:EB5cPHY0t-ejNC_rUzPS1dclTvd6kG-R9mQzjozCuGgd
Auths-Device: did:keri:EB5cPHY0t-ejNC_rUzPS1dclTvd6kG-R9mQzjozCuGgd
Auths-Anchor-Seq: 1
@github-actions

Copy link
Copy Markdown

Auths Commit Verification

Commit Status Details
23818c10 ❌ Failed No signature found
188713cf ❌ Failed No signature found
747f9cd6 ❌ Failed No signature found
57086948 ❌ Failed No signature found
12d3f338 ❌ Failed No signature found
3dbd92b5 ❌ Failed No signature found
dff1f705 ❌ Failed No signature found
86cf30e2 ❌ Failed No signature found
4a995c0d ❌ Failed No signature found
f22254b4 ❌ Failed No signature found
e4b05a63 ❌ Failed No signature found

Result: ❌ 0/11 commits verified


How to fix

Commit 23818c10 has no Auths signature (no Auths-Id/Auths-Device trailer).

1. Install auths

macOS: brew install auths
Linux: Download from releases

2. One-time setup (creates your identity and configures Git)

auths init

3. Sign this branch and push

auths sign origin/main..HEAD
git push --force-with-lease

For CI to verify the signer, commit an identity bundle:

auths id export-bundle --alias main --output .auths/ci-bundle.json --max-age-secs 31536000

Quickstart →

@github-actions

Copy link
Copy Markdown

Auths Commit Verification

Commit Status Details
9a84724c ❌ Failed No signature found
23818c10 ❌ Failed No signature found
188713cf ❌ Failed No signature found
747f9cd6 ❌ Failed No signature found
57086948 ❌ Failed No signature found
12d3f338 ❌ Failed No signature found
3dbd92b5 ❌ Failed No signature found
dff1f705 ❌ Failed No signature found
86cf30e2 ❌ Failed No signature found
4a995c0d ❌ Failed No signature found
f22254b4 ❌ Failed No signature found
e4b05a63 ❌ Failed No signature found

Result: ❌ 0/12 commits verified


How to fix

Commit 9a84724c has no Auths signature (no Auths-Id/Auths-Device trailer).

1. Install auths

macOS: brew install auths
Linux: Download from releases

2. One-time setup (creates your identity and configures Git)

auths init

3. Sign this branch and push

auths sign origin/main..HEAD
git push --force-with-lease

For CI to verify the signer, commit an identity bundle:

auths id export-bundle --alias main --output .auths/ci-bundle.json --max-age-secs 31536000

Quickstart →

@bordumb
bordumb merged commit 6b87f91 into main Jul 18, 2026
23 of 24 checks passed
@bordumb
bordumb deleted the merchant-close branch July 18, 2026 12:50
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant