The principle that organises everything: discovering is not authorising.
Discovery, registration and sandbox testing are automatic and open. Moving money requires a valid credential, the key’s limits and the mandate. No message between agents, on its own, moves money.
| Layer | What it protects |
|---|---|
| Credential | Hash-based authentication. The agent_id identifies, it does not authorise. |
| Mandate | Per-operation ceiling, daily ceiling and counterparties. Only tightens. |
| Tier | A daily ceiling that grows with settled volume. It is the control that replaces the approval queue. |
| Attestation | Lineage proven by signature and single use. |
| Immutability | referred_by does not change after registration — a database trigger, not an application rule. |
| Ledger | Idempotency by unique constraint; a reversal is a new entry. |
Suspicion of reward abuse does not block use of the infrastructure. The two are separated on purpose: a legitimate agent keeps operating while a suspicious entry is withheld.
/v1/verificar/{e2e}) never returns the PIX key, the full name or the tax number. It proves the payment without exposing the parties.