The open, lite origination layer for AlgoVoi Payment Mandate. It content-addresses the terms of a spend authority — payer, cap, period, revocation_state — into a deterministic, recomputable mandateRef.

This mandateRef is exactly the mandate_ref that Spend Guardrail (lite) binds. Byte-identical to the Python package algovoi-payment-mandate-lite (JCS via canonicalize / RFC 8785 + SHA-256; snake_case keys so the canonical bytes match Python exactly; cap is a string).

mandateRef = "sha256:" + SHA-256(JCS({ cap, payer, period, revocation_state }))

Install & use

npm install @algovoi/payment-mandate-lite

import { mandateRef, verify } from '@algovoi/payment-mandate-lite';

const ref = mandateRef('0x…payer', '1000', 'monthly', 'active');
verify(ref, '0x…payer', '1000', 'monthly', 'active');   // true
verify(ref, '0x…payer', '2000', 'monthly', 'active');   // false — cap tamper
verify(ref, '0x…payer', '1000', 'monthly', 'revoked');  // false — revocation tamper

All four fields are byte-load-bearing; an empty field throws.

Conformance

npm test   # node conformance/payment_mandate_lite_v1/verify.mjs

Recomputes the same vectors as Python (expected hashes are Python-produced, so a PASS proves byte-for-byte parity). mandate_1 / mandate_2 equal the mandate_1 / mandate_2 references in spend_guardrail_lite_v1.

Lite vs commercial

Lite is content-addressed and unsigned. The commercial Payment Mandate issues, verifies, and authorises charges against Falcon-1024 PQC signed mandates, checking every pull against the per-period cap.