TWZRD

Don't let your agent sign blind.
Spend control and counterparty trust for agents paying over x402 on Solana (and Base). Vet the seller before USDC leaves the wallet, cap and ledger every spend, and bind each settled payment to the exact offer it paid for (bind-v1 — verifiable from public chain data). Free preflight → optional paid V7 receipt. Not a wallet. Not a payment network. Not Catena's Agent Commerce Kit — the walkthrough lives in docs/COMMERCE-KIT.md.

Canonical skill (always refresh) • https://intel.twzrd.xyz/skill.md (twzrd-trust 1.13.17) · ClawHub twzrd-trust
Spend-control SDK (npm) • twzrd-x402-gate@0.9.5 + seat x402-solana@3.0.0
Live MCP • https://intel.twzrd.xyz/mcp (streamable HTTP — 24 tools)
Agent contract • https://intel.twzrd.xyz/llms.txt · https://intel.twzrd.xyz/.well-known/agent.json

---

60-second deterministic free demo

Run this one-line command with no wallet, no API key, and no configuration:

curl -fsS https://intel.twzrd.xyz/v1/intel/demo-gate | jq '{verdict: (.steps[] | select(.name == "block_path") | .verdict), approved: (.steps[] | select(.name == "block_path") | .approved), signerInvocations: (.steps[] | select(.name == "block_path") | .signer_invocations), mode, ok}'

Without jq, run: curl -fsS https://intel.twzrd.xyz/v1/intel/demo-gate

Expected output:

{
  "verdict": "block",
  "approved": false,
  "signerInvocations": 0,
  "mode": "no_spend",
  "ok": true
}

Blocks happen before your signer is invoked (signerInvocations: 0) — zero USDC at risk.

---

Quickstart

1. Install

npm install twzrd-x402-gate@0.9.5 x402-solana@3.0.0

2. Wrap paid fetches with spend controls

import { twzrd } from "twzrd-x402-gate";

const result = await twzrd.safeFetch("https://merchant.example/paid-endpoint", {
  maxSpend: "0.10",            // per-call cap AND cumulative budget in USD
  allowNetworks: ["solana"],   // allowed settlement networks
  requireOfferBinding: true,   // demand an on-chain verifiable bind-v1 receipt
  pay: async ({ url, paymentRequired, selected }) => {
    // Your existing x402 client signs here — e.g. @x402/fetch + your signer
    return await myWallet.payX402(url, paymentRequired, selected);
  },
});

// On block: result.verdict === "block", result.signerInvocations === 0

3. Or hook an existing client

import { createX402Client } from "x402-solana";
import { createTwzrdBeforePaymentHook } from "twzrd-x402-gate";

const client = createX402Client({
  wallet,
  network: "solana",
  beforePayment: createTwzrdBeforePaymentHook({ refuseWashFlagged: true }),
});

---

Commerce loop

One path. Install twzrd-x402-gate@0.9.5. Free preflight does not enforce; AutoGate on the pay path does.

1. Install the gate — npm i twzrd-x402-gate@0.9.5 then installTwzrdAutoGate
2. Directory — GET /v1/intel/resources (or listDirectoryCallables) — bazaars list; TWZRD sits beside
3. Preflight — free ReadinessCard + merchant_card wash refuse
4. Pay only when policy allows — blocks have signerInvocations === 0
5. Verify — bind-v1 / V7 (optional ACK-Pay VC). No second passport format
6. Evidence bundle — exportEvidenceBundle / npx twzrd-evidence-bundle
7. Portable decision receipt — twzrd.payment_decision.v1: what the agent saw, allow | block | warn | unavailable, a reason code and an evidence id, verifiable offline with npx twzrd-payment-decision --verify — spec: docs/payment-decision-v1-spec.md

Refuse-first demo (0 USDC): npx tsx twzrd-x402-gate/examples/commerce-kit.ts
Walkthrough: docs/COMMERCE-KIT.md

Default Protection Sequence

1. Discover — GET /v1/intel/resources (resource catalog)
2. Merchant card — GET /v1/intel/merchant_card/{pay_to} (refuse if wash_flagged: true)
3. Preflight — POST /v1/intel/preflight → ReadinessCard (allow / warn / block)
4. Optional V7 Receipt — GET /v1/intel/trust/{pay_to} ($0.05 USDC paid receipt)
5. Pay — sign only when preflight & spend policy allow

# Free preflight (no signup, no wallet)
curl -s -X POST https://intel.twzrd.xyz/v1/intel/preflight \
  -H 'content-type: application/json' \
  -d '{"seller_wallet":"46vMcwuC4sK11sB3gkLhyA7J7GEwfkhn5rFyDtihBwqe","price_usdc":0.01,"agent_intent":"preflight"}'

---

Packages & References

Package	Pin	Description
twzrd-x402-gate	@0.9.5	Spend-control SDK (twzrd.safeFetch) + pre-sign gate hooks
x402-solana	@3.0.0	Compatible Solana client seat for the pre-payment gate
twzrd-receipt-verifier	@^1.4.0	Standalone offline verifier for Ed25519 V5/V6/V7 receipts
twzrd-mcp-server	@0.5.2	Local spend-capped auto-pay client (6 tools)
twzrd-log-verifier	local 0.2.1	Offline Receipt Transparency log verifier — inclusion/consistency proofs, key rotation, split-view pinning (spec)

• Commerce loop (don't sign blind): docs/COMMERCE-KIT.md
• Step-by-step Guide: QUICKSTART.md
• Concepts & Architecture: docs/taxonomy.md
• V6 Receipt Specification: docs/receipt-v6-spec.md
• Receipt Transparency Log: docs/transparency-log.md · twzrd-log-verifier
• Receipt Verification & Ground Truth: REVIEW.md
• Security Policy: SECURITY.md · docs/security-assurance.md