{
  "name": "HumanMirror Purchase Firewall",
  "version": "2026-09-24.4",
  "canonical": "https://humanmirror.fr/purchase-firewall/",
  "purpose": "Independent transaction-policy control before an AI-agent purchase and independent execution evidence after the action.",
  "custody": "non_custodial",
  "payment_authority": "external_payment_provider_or_native_rail",
  "transaction_policy": {
    "product": "HumanMirror Value Firewall",
    "endpoint": "https://humanmirror.fr/api/value/firewall/",
    "protocol": "huvp/1",
    "checks": [
      "amount",
      "currency",
      "destination",
      "category",
      "authorization"
    ],
    "decisions": [
      "ALLOW",
      "REVIEW",
      "BLOCK"
    ],
    "role": "Evaluate caller-supplied purchase intent against declared transaction constraints before settlement."
  },
  "operational_preflight": {
    "optional": true,
    "product": "HumanMirror Safe Preflight",
    "endpoint": "https://humanmirror.fr/api/x402/safe-preflight/",
    "protocol": "x402-v2",
    "role": "Optional operational-risk check for the proposed command or tool action before execution."
  },
  "receipt": {
    "product": "HumanMirror Execution Receipt",
    "endpoint": "https://humanmirror.fr/api/x402/execution-receipt/",
    "protocol": "x402-v2",
    "network": "eip155:8453",
    "price_usdc": "0.010",
    "role": "Create and verify a cryptographic execution receipt for an observed input/output pair after execution."
  },
  "intent_binding_reference": "https://humanmirror.fr/.well-known/agentic-intent-binding.json",
  "truth_boundary": [
    "HumanMirror evaluates caller-supplied transaction intent and constraints; it does not by itself prove legal user authorization.",
    "HumanMirror does not move or custody purchase funds.",
    "HumanMirror does not replace fraud controls, KYC, card-network, wallet, merchant or native payment-provider controls.",
    "The live HTTP 402 challenge is authoritative for x402 payment terms."
  ],
  "pilot": {
    "name": "HumanMirror Production Pilot",
    "scope": "one production agent-purchase workflow",
    "duration_days": 14,
    "price_eur": 990,
    "checkout": "https://buy.stripe.com/00wfZa5j64xd65Y7WM6J20g"
  },
  "transaction_binding": {
    "endpoint": "https://humanmirror.fr/api/value/bind/",
    "protocol": "huvp-transaction-binding/1",
    "role": "Bind declared purchase intent, proposed action, exact payment terms and declared authorization evidence into one signed ALLOW / REVIEW / BLOCK decision.",
    "checks": [
      "intent_policy",
      "payment_amount_match",
      "payment_currency_match",
      "payment_destination_match",
      "authorization_evidence_scope"
    ],
    "decisions": [
      "ALLOW",
      "REVIEW",
      "BLOCK"
    ]
  },
  "transaction_closure": {
    "endpoint": "https://humanmirror.fr/api/value/close/",
    "protocol": "huvp-transaction-closure/1",
    "role": "Reconcile a signed HumanMirror transaction binding with caller-supplied observed action/payment data after execution and emit signed MATCH or DRIFT evidence.",
    "verdicts": [
      "MATCH",
      "DRIFT"
    ],
    "drift_checks": [
      "action",
      "payment_amount",
      "payment_currency",
      "payment_destination",
      "payment_rail",
      "payment_resource",
      "execution_after_non_allow"
    ],
    "truth_boundary": "MATCH proves consistency with the signed HumanMirror binding for the caller-supplied observed data; it does not independently prove settlement, delivery, legal authorization or external-world truth."
  },
  "ucp_adapter": {
    "endpoint": "https://humanmirror.fr/api/value/ucp-bind/",
    "mapping_version": "humanmirror-ucp-binding-map/1",
    "input": "caller-supplied UCP checkout plus explicit currency exponent and native payment context",
    "output": "huvp-transaction-binding/1",
    "validation_scope": "field_mapping_only",
    "truth_boundary": "Maps UCP checkout fields into HumanMirror Purchase Firewall. Does not claim UCP conformance, signature verification, merchant truth, native payment authorization or settlement."
  }
}
