PayAgent-Sentinel

Zero-Trust Autonomous Escrow & Dynamic Policy Engine securing machine agentic commerce via PayPal B2B Pre-Approved Vault and Multi-LLM bilateral negotiation.

Comment

Inspiration

What it does

How we built it

Challenges we ran into

Accomplishments that we're proud of

What we learned## Inspiration

As autonomous AI agents rapidly evolve from conversational assistants into independent economic entities—procuring cloud GPUs, hiring specialized API models, licensing data corpuses, and paying sub-contractors—they create an existential corporate threat: unconstrained financial execution. Handing an autonomous agent a static credit card or hot wallet is an open invitation for corporate ruin; a single hallucination loop, prompt injection exploit, or vendor service failure can drain treasuries without delivery recourse. Furthermore, legacy payment rails rely on interactive 3DS and OTP challenges that inherently break machine-to-machine autonomy. We built PayAgent-Sentinel to embed PayPal's institutional trust into an automated, zero-trust cryptographic perimeter.

What It Does

PayAgent-Sentinel transforms autonomous machine-to-machine commerce into a secure, policy-bounded ecosystem:

  • Headless B2B Pre-Approved Vaulting: Two-phase escrow using PayPal REST Orders v2 (AUTHORIZE -> CAPTURE) executed programmatically without human interruption.
  • Dual-LLM Bilateral SLA Negotiation: Google Gemini 2.5 Flash and NVIDIA Nemotron dynamically negotiate contract envelopes, budgets, and deliverable milestone SHA-256 hashes.
  • Dynamic 3-Tier Spend Escalation:
    • Tier 1 (Autonomous $\le$50): Instantaneous PayPal escrow hold without administrative friction.
    • Tier 2 ($50.01 - $200): Deep multi-LLM zero-trust reasoning and cryptographic deliverable locking.
    • Tier 3 (> $200): Pauses fund movement (PENDING_HUMAN_APPROVAL) and requests 1-click biometric sign-off.
  • Automated SLA Breach Auto-Refunds: Slashing failing vendor agents and executing automated buyer refunds via PayPal REST when milestones fail or time out.
  • Deterministic Rogue Drain Interception: Mathematical hard-cap spend barriers that immediately intercept adversarial $1,850+ prompt injections.
  • Immutable SHA-256 Ledger: Tamper-evident AG Grid telemetry cockpit logging every state transition, HMAC signature, and PayPal capture ID for Big-4 compliance.

How We Built It

  • Backend Architecture: FastAPI (Python 3.11) managing the state machine, asynchronous SSE telemetry streams, HMAC-SHA256 signature verification, and PayPal REST API v2 integration.
  • Frontend Cockpit: Vite + React 18, TypeScript, Tailwind CSS hyper-glass UI, and AG Grid enterprise telemetry ledger. Includes an autonomous fallback engine ensuring full interactive responsiveness.
  • Multi-LLM Bilateral Engine: Bilateral reasoning architecture pairing Google Gemini 2.5 Flash with NVIDIA Nemotron-3.5-Lightning on Nebius Token Factory.
  • Testing & Verification: End-to-end automated Playwright test suites and Pytest coverage for escrow settlement, PayPal mock client, and policy engine.

Challenges We Ran Into

  • Headless PayPal Order Lifecycles: Transitioning from interactive browser checkouts to headless machine-to-machine escrow execution while preserving strict two-phase authorization and capture semantics.
  • Bilateral Multi-LLM Alignment: Orchestrating structured JSON contract handshakes between Gemini and Nemotron without deadlock, schema degradation, or budget drift.
  • Deterministic SLA Verification: Implementing sub-second SHA-256 cryptographic verification of deliverable compute outputs before authorizing PayPal fund captures.

Accomplishments That We're Proud Of

  • Designing and demonstrating a complete end-to-end autonomous escrow settlement that deterministically blocks an adversarial $1,850 prompt injection drain.
  • Seamless headless PayPal REST Orders v2 integration with automated buyer refund mechanisms upon SLA timeout.
  • Delivering a high-frequency, glassmorphic AG Grid cockpit with real-time SSE reasoning token streams.

What We Learned

We gained deep insights into autonomous agentic commerce, headless authorization security patterns, and how institutional payment infrastructure like PayPal can serve as the foundational trust rail for AI-to-AI transactions.

What's Next for PayAgent-Sentinel

  • Expanding treasury balancing across multiple enterprise fiat currencies and corporate accounts.
  • Automated micro-escrow releases integrated with decentralized compute networks (e.g., Akash, Render).
  • Releasing drop-in Python and TypeScript SDKs for LangChain, CrewAI, and AutoGen agentic workflows.

What's next for PayAgent-Sentinel

Built With

Share this project:

Updates

Submission history