NONCUSTODIALPOLICY-CONTROLLEDEVIDENCE-FIRST

Let agents buy tools.
Keep the power to say no.

Andromalius is security infrastructure for x402: verify the quote, enforce the budget, settle once, and preserve the evidence before autonomous software can spend.

See how it works Explore the product stack

140automated tests passing

7packaged interfaces

0known dependency vulnerabilities

Basemainnet-native settlement

01 / THE SYSTEM

Policy before payment.
Evidence after.

The model is simple: narrow what an agent may buy, make each decision inspectable, and treat every uncertain transaction as spent until independently reconciled.

Preview

Inspect a registered product and its live x402 challenge without loading a wallet.

Bind

Pin the exact service, origin, payee, token, amount, mode, and budget decision.

Approve

Present one bounded signature or transaction for explicit wallet confirmation.

Prove

Verify settlement, preserve signed evidence, and reconcile a hash-chained ledger.

02 / HARD BOUNDARIES

Eight checks between intent and spend.

Any drift denies the payment. The policy does not “helpfully” choose another route.

01Wallet allowlist

02Exact payee

03Base mainnet

04Native USDC

05Per-call ceiling

06Daily ceiling

07Cumulative ceiling

08No silent fallback

03 / PRODUCT STACK

Free at the edge.
Paid where control compounds.

One technical foundation supports four commercial layers—from open-source adoption to metered audits, team governance, and private deployments.

Open source

The secure client

A free CLI and MCP server that verifies every quote, holds the line on policy, and keeps wallet authority on your machine.

Read-only first · explicit approval before spend

Pay per result

Independent x402 audits

Machine-buyable challenge and discovery checks for teams shipping x402 services. No arbitrary URL fetching. No submitted artifact retention.

$0.01 challenge audit · $0.02 discovery audit

Design partner

Team control plane

Short-lived signed policy bundles, entitlement controls, and sanitized usage summaries—without sending wallet keys to a central service.

Proposed pilot · $299/month · manually provisioned

Private deployment

Enterprise operations

A hardened deployment profile, evidence-backed change control, backup and recovery procedures, and a path to managed production support.

Custom scope · security review required

USDCBASE

SETTLED

IDEMPOTENT

HASH-CHAINED

04 / REVENUE INTEGRITY

Money lands in the wallet. Evidence lands in the ledger.

Merchant revenue settles directly to the configured Base wallet. Andromalius records a privacy-minimized, transaction-bound accounting trail—without storing payer identity or customer audit inputs.

01 Duplicate transaction retries never inflate totals.
02 Edited or partial records fail verification.
03 Revenue summaries open the ledger read-only.
04 Operators reconcile against Base and facilitator records.

05 / CURRENT STATUS

Website live.
Paid launch gates stay visible.

COMPLETE Source, package, tests, audits, and revenue ledger

COMPLETE Hosted container qualification

COMPLETE Domain, public website, DNS, and managed TLS

PENDING Facilitator credentials and merchant canary

PENDING x402scan registration and public beta

06 / STRAIGHT ANSWERS

What the system does—and what it does not.

Does Andromalius hold customer funds?

No. The buyer uses a locally controlled, explicitly allowlisted wallet. The team service receives policy and sanitized usage data—not private keys or payment authorizations.

Can an agent pay any URL?

No. The client exposes a closed registry of services pinned by policy. Origin, route, network, token, payee, price, timeout, and response shape must all match.

Where does merchant revenue go?

Independent-audit revenue settles as native USDC directly to the configured Base wallet. A transaction-idempotent, hash-chained ledger provides a separate application accounting trail.

Is the public service live?

The public website is live. The paid merchant API remains in controlled staging until facilitator provisioning, operational-control evidence, an independent payment canary, and x402scan registration are complete.

ANDROMALIUS / SECURE X402 INFRASTRUCTURE

Autonomy needs boundaries.

The website is public. The paid API beta is not open yet. Until every launch gate passes, the safest call to action is the honest one: inspect the evidence, then decide what deserves authority.

Return to the top ↑