Skip to content

delta mandate

Intent enforcement for delegated payments.

Closed Alpha Project is currently under closed alpha. Contact [email protected] for access.

delta mandate is a cryptographic enforcement system for financial actions delegated to AI agents. It is built for an operator — a platform that runs agents for its users — to ensure each proposed action respects the user’s intent. Typical operators include agentic commerce platforms and neo-banks.

The user defines an intent. An agent proposes a candidate solution. delta mandate extracts evidence from the proposal, evaluates it against the intent, and produces a cryptographic proof of the evaluation result that anyone can independently verify.

In practice, delta mandate sits between the agent’s proposed action and the operator’s execution layer: your system submits the proposal, delta returns a verified success/failure result, and the action only proceeds if it satisfies the user’s authorized policy.

  1. Author — an agent drafts a policy via the MCP.
  2. Define — the user defines their intent (the policy plus any required values), which is submitted to the orchestrator.
  3. Propose — the agent submits a proposal, e.g. a specific product variant.
  4. Extract — the orchestrator extracts the evidence (relevant facts) from the proposal.
  5. Verify — the orchestrator evaluates the evidence against the intent and generates a ZK proof.
  6. Outcome — a success / failure verdict (with evidence and any failed constraints) is streamed back.

delta runs the servers. You don’t deploy or operate the orchestrator, the prover, or the internal services. You integrate against exactly two surfaces:

  • the Orchestrator API (HTTP / OpenAPI), and
  • the policy-generation MCP (for agents).

Orchestrator API

The HTTP API your backend uses to run the lifecycle: register policies, submit intents, submit proposals, and subscribe to outcome events.

Read the Orchestrator API →

MCP

The agent-facing surface for authoring the policy a user’s intent is built on: a language reference, taxonomy search, and policy validation.

Read the MCP page →

Extracting evidence is what turns a proposal into the facts the orchestrator checks. The verification — and the proof it produces — is equally rigorous in every case; what changes is how hard the extraction is, depending on where the data lives and how well-structured it is.

  • Available today Sources on UCP — a standard for exposing structured product data. We run a production-ready extraction engine for these.
  • Built with you Your own systems — when the facts live in your systems, we build the extraction integration together. Get in touch.
  • On the roadmap Unstructured web content — free-form data anywhere on the open internet.

Son of Anton is a hosted live preview, named after the rogue AI in Silicon Valley that buys what no one asked for. An agent shops on a user’s behalf under a guardrail, and delta mandate verifies each proposed product against the real Shopify UCP catalog before the purchase can proceed.

Bring your own agent is the self-serve version for Claude Code, connect to our public MCP and run the full loop yourself: author a policy, propose a product, and read the verified verdict.

Son of Anton

Bring your own agent