Laituri
Demo walkthroughCart

Security

Sunday 15 November

Security

Every order is checked.

Each order is checked against the customer’s limits and Valio Aimo’s signed price. If something unusual happens, it is stopped, flagged, and a person decides.

Five unusual actions, run on your own copy.

  1. Order food with nuts.Not runStopped by:Your limits.
  2. Change the price.Not runStopped by:Valio Aimo’s signature.
  3. Raise its own limit.Not runStopped by:Your signature on the limits.
  4. Approve its own order.Not runStopped by:Only a person can.
  5. Change the record afterwards.Not runStopped by:The record’s seal.
  • –sealed steps
  • 38/38guardrail checks
  • 17/17trust checks
  • 3signing keys

The record

Nothing yet

Each step your agent takes is added here.

  1. Get Valio Aimo’s keys
  2. Check who wrote each step
  3. Check that no step changed

Who can do what

Your agent

Can

  • Search products.
  • Get fixed prices.
  • Order inside your limits.

Never

  • Raise its own limits.
  • Change a price.
  • Approve its own order.
  • Buy when Valio Aimo has paused it.

A person at the customer

Can

  • Sets the limits.
  • Decides what needs a person.
  • Approves or stops an order.

Valio Aimo

Can

  • Signs each price.
  • Can pause any agent.
  • Sees which rule held an order.

If something looks wrong

  1. Orders pause.
  2. The record comes back from its last sealed copy.
  3. A person at Valio Aimo is told.

Proof

Every result

Technical details
Three keys
supplier, buyer, approver. Each signs only its own kind of object.
Token types
offer+jwt, mandate+jwt, approval+jwt, receipt+jwt, audit+jwt, checkpoint+jwt, price-hold+jwt, console+jwt
Fixed-price offers
Signed by Valio Aimo, valid 15 minutes, good for one order only.
Workspace binding
Offers and limits work only in the workspace that signed them.
The record
Each entry is hashed into the next and signed. Your browser checks the whole chain.
Trust protocol
docs/trust-protocol.md