x402APGTESTNET · NO REAL FUNDS

Security

Policy enforcement before settlement

APG separates authorization, verification, and settlement so an institution can reject non-compliant payment intent before any transaction is submitted.

Authorization integrity

EIP-712 and ERC-3009 bind the payer, recipient, USDC amount, validity window, and nonce to a cryptographic signature. APG verifies the recovered signer and rejects expired, replayed, malformed, or mismatched authorizations.

Policy controls

  • Origin and recipient allowlists
  • Per-payment limits and cumulative agent budgets
  • Chain ID, asset contract, amount, and decimal validation
  • USDC balance checks and pre-settlement transaction simulation
  • Idempotent references and auditable transaction hashes

Key isolation

The LLM receives payment capabilities and policy results, never wallet private keys. Production deployments should isolate signing in HSM or MPC infrastructure, apply least-privilege service identities, and authenticate /verify and /settle as backend-only operations.

Testnet and production boundary

This environment is a Base Sepolia proof of concept and does not process real funds. Production requires an approved custody model, HSM/MPC key management, transaction monitoring, AML controls, a persistent double-entry ledger, observability, incident response, and an independent security review.