The sealed primary money source controlled by a human or organization.
Quick Start
The fastest production-MVP path is to use the seeded demo objects. A Spend Intent below the approval threshold is approved automatically and emits a Spend Trace.
Installation
Agent Finance OS is currently a local production-MVP control plane. It uses NestJS for the API surface and PostgreSQL for durable Source Vault, Spend Cell, Spend Mandate, Spend Intent, and Spend Trace records.
First Spend Intent
A Spend Intent is the first real action an agent takes. The runtime evaluates it against the Spend Cell boundary and Spend Mandate rules before any money movement can happen.
The Source Vault remains sealed. The agent can only act through a Spend Cell, and every decision creates a Spend Trace.
Core Model
The API is built around five primitives. These are product concepts, not generic wallet labels.
A bounded money container for one agent workflow, budget, and expiry window.
The executable spend authorization: amount, category, vendor, approval gate.
The agent's structured request to spend for a specific purpose.
The verifiable record explaining why a spend was approved, blocked, or escalated.
REST Endpoints
Use these endpoints for the first production MVP flow.
Spend Lifecycle
The lifecycle is intentionally explicit. This makes the system easier to audit, easier to integrate, and harder to confuse with a generic wallet balance.
Decision Behavior
The seeded Spend Mandate allows `api` and `data`, blocks anything above `20 USD`, and requires approval above `10 USD`.
Within the Spend Cell and below the approval gate.
Within the Spend Cell but above the human approval threshold.
Exceeds the Spend Cell boundary.
Category is outside the Spend Mandate.
Spend Trace
Every decision writes a Spend Trace linking the Source Vault, Spend Cell, Spend Mandate, Spend Intent, reason codes, and trace hash. This is the artifact that moves Agent Finance OS beyond a wallet UI.
Production Gaps
The MVP now has persistence-backed primitives, but the next production-grade work is API keys, idempotency, real settlement adapters, integration tests, migrations, dashboard auth, and append-only trace hardening.