← All demos
SIGN · 1 of 10
A $42,000 wire pauses until a real human signs.
No session token, no leaked credential, and no AI agent can clear this gate. The signature must come from Asha's device, must be bound to this wire's canonical payload, and must be replayed at every wire above the policy threshold, never reused from a prior approval.
Privacy posture for this scene
We don't watch the worker. We require a fresh signature.
- No keystrokes captured. No webcam. No behavioural profile.
- Face ID / Touch ID stays on the user's device. Manav never sees the biometric.
- The receipt is signed by Manav's published Ed25519 key, verifiable offline by anyone.
High-risk action · pending
Submitted by ap-bot · 18:21:54
$42,000.00
USD · queued for release
BeneficiaryGreenLeaf Designs LLC
Account****8821
MemoInvoice INV-2026-77 · branding work
Approver requiredAsha Raman, VP Operations
What the attacker sees
The bot has the API token. It tries.
POST /api/wires/release
X-Wire: wire_9281
Authorization: Bearer ap_bot_eyJxx...
// missing X-Manav-Proof
⛔ Blocked at the gate
Policy require_human_signature_for: wire ≥ $1000 rejects with HTTP 428.
What the relying party logs
Audit row written on failure.
{
"event": "HIGH_RISK_BLOCKED",
"reason": "NO_HUMAN_SIG",
"actor": "ap_bot",
"target": "wire_9281",
"severity": "critical"
}
✓
Wire released, human-signed
$42,000.00 to GreenLeaf Designs LLC · view public proof →
Want to ship this in your own app?
Three lines of JavaScript. Demo key mnav_test_demo works on localhost.
Manav