Approval Moment

Problem: AI agents that can pay are one prompt injection away from sending money to the wrong place. The agent's own judgment is not a safe gate, because the attacker talks to the agent, not to the owner.

Approval Moment is an independent payment verifier that sits between an AI agent and the money. The owner writes a plain rule (what to pay, how much, to whom). For every payment request, the verifier checks the real invoice and the agent's claim against that rule, scans the documents for hidden instructions (prompt injection), and only then approves, blocks, or asks the human. A built-in scorecard runs 8 attack scenarios (hidden text, inflated amounts, changed payee, and more) and shows what was blocked.

Implementation: dependency-free Node.js app with 55 tests. Orders support direct payment and escrow, where funds are held until the buyer accepts, with refund on timeout and a simulated arbitrator for disputes.

NEAR's role: payments settle for real on NEAR testnet. The app signs ed25519 transfers over NEAR RPC, shows the sender balance before and after, the network fee, and a nearblocks explorer link for every transaction. A read-only key check lists a NEAR account's access keys and flags full-access keys as dangerous, recommending function-call keys for agents. Testnet only, no real money moves.

Built with AI assistance (Claude); voiceover generated with AI.