An autonomous agent declares it's about to move USDC. Before the rail fires, the gate evaluates a signed pre-action passport. The decision returns a signed receipt. No allow, no transfer. Every signature is real Ed25519 (RFC 8032), every body uses RFC 8785 JCS canonicalization, every response carries a Layer C honesty header. Backend is live at .
// POST /v1/attest/passport/issue
// POST /v1/attest/gate/evaluate
// Conditional on gate.decision === "allow"