Inspiration
What it does
How we built it
Challenges we ran into## Inspiration
Independent creators lose hours and money to scope creep, prompt injection, and Item Not Received (INR) chargebacks. ScopeGate places an embodied AI Core Commerce Agent between buyer and seller—gating scope and anchoring cryptographic agreements directly onto PayPal's ledger before money moves.
What It Does
- Pre-Order Scope Referee: Isolates briefs in an XML sandbox to veto prompt injections and out-of-scope demands (
REJECT) in ~1.5s, while calculating surcharges deterministically in code. - SHA-256 & 40/60 Escrow Ladder: Freezes agreed deliverables and pricing into a 64-char SHA-256 hash, enforcing sequential 40% Deposit (m1) + 60% Balance (m2) gating (
HTTP 409on stage bypass). - Physical PayPal
custom_idAnchor: Embedscustom_id = "<contract_hash>:<milestone>"into PayPal Orders v2 (NO_SHIPPING), verified live viaGET /v2/checkout/orders/{id}in our Official Ledger Receipt. - Automated Defense Brief (PDF): Logs buyer download IP, User-Agent, and SHA-256 proof, compiling a PayPal Seller Protection-compliant Defense Letter PDF for
POST /v1/customer/disputes/{id}/provide-evidence.
Built With & Verified Proof
- Stack: Node.js (
>=22), Express, PayPal Orders v2 & Disputes API (Sandbox), GLMglm-5.3-flash, SHA-256. - Verified: 56/56 eval assertions passing (
npm run eval) and live PayPal Sandbox disputePP-R-LKW-10194104successfully submitted toUNDER_PAYPAL_REVIEW.
Judge Quick Trial (2 Minutes · No Install)
- Live Console: scopegate.onrender.com/console (Homepage)
- Demo Video: Watch on YouTube
- GitHub: github.com/Michael0130/scopegate
- Sandbox Buyer:
[email protected]/1zEmG5%-
- Click Alex · Fullstack → open 💡 Preset Scenarios ▼ at the top.
- Test
Scope Creep: Native Mobile Apps→ instantREJECT. - Test
Product Launch Landing Page→ instantACCEPT ($500)→ click✓ Sign & Create Order. - Click
Pay m1 · $200.00(approve in PayPal Sandbox) → clickDownload deliverable→ inspect🧾 Official Receipt ↗and📦 Simulate INR Dispute→📄 View Defense PDF ↗.
Accomplishments that we're proud of
What we learned
What's next for ScopeGate
Built With
- ai-agents
- crypto
- css3
- docker
- escrow
- express.js
- fintech
- glm-4
- html5
- javascript
- llm
- multi-agent
- node.js
- orders-v2
- paypal
- prompt-injection-defense
- render
- rest-api
- sha-256
- webhooks
- zhipu-ai