{"repo":"Bestpart-Irene/secondsign-core","free":true,"listed":false,"github":"https://github.com/Bestpart-Irene/secondsign-core","clone":"git clone https://github.com/Bestpart-Irene/secondsign-core.git","description":"The gate between an AI agent and real money. Runtime authorization for financial AI agents: structured intent, deterministic policy, human approval, execute-once gateway, tamper-evident receipts. Open core, Apache-2.0.","language":"Python","stars":32,"topics":["agent-security","agentic-ai","ai-agents","ai-safety","alpaca","apache-2-0","audit-log","authorization","financial-services","fintech"],"license":"Apache-2.0","category":"auth-billing-email","readme_excerpt":"An independent transaction co-signer for AI agents that manage other people's money. An out-of-mandate transaction is never signed, so it never happens — and every decision leaves evidence the operator could not have written for itself. --- See it run One screen, three vantage points: the agent that proposes, the human who decides, and the money that only moves when both sides of the boundary agree. The agent container in ① holds no payment credential and no network route to the rail — its only way to money is a proposal to the gateway. The panel in ② talks to the gateway over a second mTLS channel with its own CA and its own network , which the agent cannot reach. The ledger in ③ is read at the destination, because \"my attempt failed\" and \"nothing arrived\" are different statements. Install Run the quickstart (no Docker) The whole decision path in one script — three proposals through the real gateway authorize() / resolve() , on a mock rail that moves no money: examples/quickstart.py is self-contained on the public API — clone the repo to run it, or copy it anywhere. For the production-faithful topology — two networks, mTLS, the agent in its own container with no rail code — run the demo below. Run the demo (Docker required) The $300 proposal will sit at awaiting review until you press Approve in the panel — then the agent's own re-send of the same handle reads completed , and one request appears on the ledger. Decline it instead and nothing moves. Details and the security pr","default_branch":null,"files":null,"tree":[],"storefront":"/r/Bestpart-Irene","claimed":false,"request_supported":{"post":"https://gitbuyer.com/r/Bestpart-Irene/secondsign-core/request-supported","requests":0},"note":"indexed from public GitHub; nothing is for sale on this page. Clone it from GitHub. Paid listings live at /search."}