Demo narrative
Click “Run live demo scenario”. It will, against this live gateway:
1. issue a root warrant (principal → agent) capped at $50 total spend
2. authorize an in-scope $20 payment → ALLOW
3. attenuate the warrant for a sub-agent (read-only) → provably narrower
4. sub-agent attempts a payment → DENY (outside delegated scope)
5. push spend past the $50 cap → DENY (cumulative limit)
6. revoke the warrant, then retry → DENY (revoked)
Every line above is written to a hash-chained audit log you can independently verify.