Abstract

A system fences the irreversible completion step of a software-initiated transaction

against a single-use capability held, and consumed, by a registry that is a party other

than the system. In the principal embodiment the transaction is an agentic purchase

and the capability is a single-use nullifier or transaction-scoped entitlement

associated with a standing payment authorization, which the consumption does not

exhaust. The system assigns a durable linearization point, evaluates four conditions

against an approved snapshot, writes a durable consume-intent naming an operation

identity, invokes a consume conditioned upon head-generation currency and at-most-

once consumption across all operation identities, compares the bindings the registry

returns against those recorded, and performs one atomic local commit of a terminal

record and either a signed envelope committing the returned reference or a durable

obligation to emit one. Recovery is forward, by a finalization query naming that

identity. The envelope is verifiable offline for the state checked, and by a non-party

for the consume.

Creative Commons License

Creative Commons License
This work is licensed under a Creative Commons Attribution 4.0 License.

Download

Share

COinS