Transaction model
Protect credentials and value
- Confirm whether the environment contains test value or real value.
- Confirm the supported wallet/payment product and provider before initiating anything.
- Do not infer financial harmlessness from a hostname containing words such as
dev,test, orsandbox. - Require explicit human approval before an AI application performs a value-moving tool call unless a separately approved policy defines a safe autonomous boundary.
- Keep credentials and bearer tokens out of browser code and logs.
- Do not retry initiation blindly; use documented idempotency and transaction-state behavior.