Specifications Overview
AgentPay protocols, state machines, data models, and security designs are formally defined as specifications, backed by executable cross-language conformance test vectors (verified identically against Python and Go implementations).
Single Source of Truth
Specifications on this site are automatically synchronized from the repository root specs/. Machine-readable JSON Schemas and test vectors are maintained at specs/conformance and specs/test-vectors.
| Topic | Description |
|---|---|
| Payment State Machine | Intent / Settlement / Fulfillment tri-state orthogonal machine |
| Wallet & Ledger | Hold / Capture / Release, append-only double-entry ledger & reconciliation |
| Protocol Consistency | Request headers, normalized error schemas & dual-path dispute resolution |
| Config Publishing | Drafts, immutable snapshot publishing, RCU hot-swapping & rollbacks |
| Audit Events | Event envelope, data sanitization, WORM retention & CSV/JSON export |
| Agent Audit & Identity | Cryptographic identity extraction, observed vs reported dimensions, kill-switch |
| Multitenant Data Model | PostgreSQL 16 schema, row-level isolation & foreign key topology |
| Security Model | Trust boundaries, STRIDE threat catalog & firewall mitigations |