You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: README.md
+7-58Lines changed: 7 additions & 58 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -2,62 +2,25 @@
2
2
3
3
Policy-controlled payment infrastructure for agent buyers.
4
4
5
-
OmniClaw core is now focused on one job: letting agents and applications pay through controlled, auditable rails without giving software unrestricted wallet authority.
6
-
7
-
The hosted facilitator is a separate deployable product under [`services/hosted-facilitator`](services/hosted-facilitator). It owns seller project API keys, hosted x402 settlement, ops console, reconciliation, and OIDC/OpenFGA control-plane auth. Seller middleware remains in each seller's own app and points at the facilitator URL.
5
+
OmniClaw core is focused on one job: letting agents and applications pay through controlled, auditable rails without giving software unrestricted wallet authority.
| Hosted facilitator |`services/hosted-facilitator`| seller project API keys, x402 facilitator URLs, exact settlement, hosted control plane, reconciliation, ops console |
15
12
16
-
Core should not import hosted facilitator modules. The hosted facilitator service should be deployable from its own directory without installing OmniClaw core.
13
+
Core should not include recipient-side paid endpoint hosting or settlement service code.
17
14
18
15
## Core Capabilities
19
16
20
17
- Financial Policy Engine for budgets, approvals, trust checks, and execution control
21
18
- Python buyer SDK via `OmniClaw().pay(...)`
22
19
- Agent buyer CLI via `omniclaw-cli pay`, `inspect-x402`, and `can-pay`
23
20
- Circle Gateway buyer funding/readiness helpers
24
-
- Standard x402 buyer flow for paying external seller endpoints
21
+
- Standard x402 buyer flow for paying external paid endpoints
25
22
- Ledger, idempotency, simulation, and payment-intent controls
26
23
27
-
## Hosted Facilitator
28
-
29
-
The facilitator service has its own package, frontend, Dockerfile, infra config, docs, and tests:
Copy file name to clipboardExpand all lines: docs/OmniClaw_Whitepaper_v2.md
+4-4Lines changed: 4 additions & 4 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -133,7 +133,7 @@ The ledger stores durable intent state and attempt state. It is the source of tr
133
133
134
134
### 5.6 Execution Service
135
135
136
-
The execution service is the only component permitted to trigger settlement. It uses provider integrations, facilitators, or rail-specific adapters, but only for already-approved intents.
136
+
The execution service is the only component permitted to trigger payment execution. It uses provider integrations or rail-specific adapters, but only for already-approved intents.
137
137
138
138
### 5.7 Audit Layer
139
139
@@ -234,8 +234,8 @@ Not all recipients create the same risk.
234
234
235
235
The task-derived architecture, which is consistent with OmniClaw’s broader control model, makes this explicit:
236
236
237
-
- Human-operated vendor
238
-
Standard vendor allowlist, ordinary approval thresholds, and contractual accountability.
237
+
- Human-operated service
238
+
Standard recipient allowlist, ordinary approval thresholds, and contractual accountability.
239
239
240
240
- Internal service
241
241
Potentially looser thresholds, but only when workload identity, service registry entry, destination account, and transaction class match internal control records.
@@ -319,7 +319,7 @@ The credibility of OmniClaw as a research system comes from the fact that these
319
319
- trust-layer types and verdicts in `src/omniclaw/identity/types.py`
320
320
- guard, reservation, and fund-lock documentation in `docs/FEATURES.md`
321
321
- compliance framing in `docs/compliance-architecture.md`
322
-
- product surfaces across buyer, seller, facilitator, and CLI workflows
322
+
- product surfaces across buyer SDK, policy engine, and CLI workflows
Startup fails fast if these are missing or if strict settlement is disabled.
17
17
18
-
For non-production package usage, `OMNICLAW_STRICT_SETTLEMENT` defaults to `false` so compatible x402 resources can still unlock even when a seller omits or delays settlement response metadata. Production deployments must opt into strict settlement explicitly.
18
+
For non-production package usage, `OMNICLAW_STRICT_SETTLEMENT` defaults to `false` so compatible x402 resources can still unlock even when an endpoint omits or delays settlement response metadata. Production deployments must opt into strict settlement explicitly.
This document covers OmniClaw core. Seller project APIs, facilitator settlement, nonce replay protection for seller middleware, control-plane auth, and reconciliation are part of the standalone hosted facilitator service:
41
-
42
-
```bash
43
-
services/hosted-facilitator/
44
-
```
45
-
46
38
## Settlement Semantics
47
39
48
40
-`OMNICLAW_STRICT_SETTLEMENT=true` ensures success reflects irreversible settlement states.
49
41
- Do not disable strict settlement in production.
50
42
51
-
## External Facilitator Strategy
43
+
## x402 Buyer Strategy
52
44
53
-
OmniClaw core is facilitator-aware as a buyer. Production buyer deployments should inspect what the seller advertises and route only through a buyer-supported payment method:
45
+
OmniClaw core is buyer-side infrastructure. Production buyer deployments should inspect what the paid endpoint advertises and route only through a buyer-supported payment method:
54
46
55
47
- Circle Gateway `GatewayWalletBatched` for gasless batched nanopayments
56
-
- standard x402 `exact` where the seller and facilitator advertise compatible requirements
57
-
- external facilitator URLs selected by the seller
58
-
59
-
Operate OmniClaw-hosted settlement from `services/hosted-facilitator`, not from the core package.
48
+
- standard x402 `exact` where the endpoint advertises compatible requirements
60
49
61
-
Before production traffic, validate the exact seller path with:
50
+
Before production traffic, validate the exact paid endpoint path with:
For hosted facilitator validation, use `services/hosted-facilitator/docs/` plus the external seller and buyer examples under root `examples/hosted_facilitator_*`.
69
-
70
57
## Canary and SLA
71
58
72
59
Use the canary script to validate end-to-end payment lifecycle before/after deploys:
@@ -88,10 +75,10 @@ Exit behavior:
88
75
## Rollout Checklist
89
76
90
77
1. Apply required production env vars.
91
-
2.Run `omniclaw doctor`.
78
+
2.Confirm the policy engine health endpoint and CLI configuration.
92
79
3. Run canary in target environment.
93
-
4. Confirm `inspect-x402` selects the expected seller scheme and network.
94
-
5. Confirm settlement appears in the selected facilitator dashboard or explorer.
80
+
4. Confirm `inspect-x402` selects the expected payment scheme and network.
81
+
5. Confirm settlement appears in the expected explorer or provider record.
Use the hosted facilitator docs for seller onboarding, facilitator URLs, project API keys, settlement/reconciliation, ops-console, and provider expansion:
0 commit comments