Single-use enrollment link
Send it to the user over a channel you already trust. Opening it registers their passkey; it works once.
Approval inbox
0New mandate
drafted, then signed by passkeyMandates
Signing and revoking use the user's passkeyProduct search
Channel3Payments
Every proposal and its deterministic decision. PayPal order and capture ids come from PayPal, not the agent. Click a row for the full record and its signed receipt.
Proof-of-Intent receipts
verifyingEach receipt is re-verified in this browser: Ed25519 issuer signature against the published key set, the user's passkey signature over the mandate, and the PayPal order digest.
Stuck payments
Payments left mid-flight by a crash or timeout. Recovery reconciles each with PayPal and never captures against an inactive mandate.
Audit ledger
checkingAppend-only and hash-chained. The Chain column recomputes sha256(prev | ts | event | ref | payload) for every row in this browser; it does not trust the server's answer.