Grayr doesn't allow your agent to fuck you over.
Vendor Registry · onchain
Every merchant resolved to a single onchain record on Base: neutral, composable, equivocation-resistant. Deterministic IDs, domain + wallet uniqueness, terminal revocation.
Verification · signed attestations
Graduated verification levels backed by EIP-712 signed attestations. Facts carry their proofs; expiry, renewal and revocation are first-class. Never present a vibe as a verified fact.
Cross-rail decision layer
Define a spending policy once and enforce it across x402, cards, ACP and AP2, with Ed25519 signed enforcement tokens, FX-normalized budgets, and org → dept → agent delegation. Deny by default.
Risk engine · explainable
Deterministic, versioned scoring with reasons, evidence and an inputs-snapshot hash on every decision. Hard overrides for sanctions and revocation. A score you can audit, not a black box.
Receipts · tamper-evident
A per-org, hash-linked receipt chain. Every mutation is evented and auditable. Detection over blind prevention, following the model of Certificate Transparency.
