One request path, three server-side checks a purchase must clear, and money that never touches us. Here is exactly how it works.
Is this a known agent, in scope? Today: JWT, scope, and tenant. Know-Your-Agent, a signed, scheme-backed agent attestation the gateway honors, is the next layer of the AUTHED lane (roadmap).
Within the mandate, is the seat free? Atomic, oversell-proof holds plus a price-lock. Anything over the cap, out of scope, or on a sold-out seat is refused here.
The merchant's own PSP settles the charge. An ambiguous outcome halts, so there is never a double-charge.
Alyte moves only instructions and tokens, never funds. Money moves from the merchant to the merchant's own PSP to the cardholder. Alyte invoices its fee separately.
The cap lives on the server, not in the prompt, the model cannot raise it. Spend authority is resolved server-side from the agent record, never read from the token or the prompt.
One atomic database operation. Proven under a 250-vs-100 rush to exactly 100 seats sold.
Integer-exact amounts, idempotent charges, and an ambiguous PSP outcome that halts rather than retries.
Every decision is recorded. The log is the source of truth for audit and for billing.
Alyte is architected to stay outside payment-service licensing: money moves from the merchant to the merchant's own PSP to the cardholder. Alyte moves only instructions and tokens, never funds, and invoices its fee separately.
We create and govern the agent, or take yours. Either way it cannot exceed its mandate.
A vaulted card and buyer persona that travels across every connected surface.
Make inventory discoverable and transactable by agents, in one integration.
| Captured | Alyte | |
|---|---|---|
| Settlement | Inside the network or one PSP | To the merchant's own PSP |
| Quantity enforcement | Not visible at auth | Enforced at reserve time |
| Inventory / oversell | Out of scope | Oversell-proof by construction |
| Price movement | A moved price can pass a cap | Quote and price-lock refuse it |
| Across schemes | One network's standard only | Verifies any scheme's proof |
Those are the proof formats. We consume and enforce them, the adapters are implemented and tested in shape, and Alyte is the enforcement layer that makes them true at checkout: before inventory is touched, across all networks. Live signature verification is on the roadmap; today the sandbox agent runs as a deterministic script.