veto-pay 0.6.2

One-line agent payments. Any rail.

pay() — authorize, sign, settle.
Veto runs the policy + risk engine; the rail does the rest.

Install

# Decision-only (no on-chain settlement) — lightest install
pip install veto-pay

# With EVM settlement (Base / Optimism / Arbitrum / Ethereum / Polygon)
pip install veto-pay[evm]

# With Solana settlement
pip install veto-pay[solana]

# Both
pip install veto-pay[all]

Quick start

from veto_pay import pay, VetoDenied

result = await pay(
    url="https://api.weather.x402.io/forecast",
    max_amount="$0.05",
    rail="auto",            # auto | evm | solana
)
print(result.tx_hash)       # on-chain tx hash on success
print(result.receipt)       # signed Veto receipt — verify offline if you want

If Veto denies, you get a typed exception:

try:
    await pay(url=url, max_amount="$10000")
except VetoDenied as e:
    print(e.reason_codes)   # ['AMOUNT_CAP_EXCEEDED']
    print(e.receipt)        # signed receipt explaining the deny

What it does

1. Authorize — POST /api/v1/authorize with the spend intent. Veto's 8-stage engine runs (policy / prompt-injection / typosquat / OFAC / address-poisoning / intent / anomaly / baseline / decision).
2. Branch on decision:
   • deny → raises VetoDenied(reason_codes=...). No tx is made.
   • escalate → raises VetoDenied (escalations require human review before they can settle).
   • allow → continue.
3. Settle on the rail:
   • EVM: calls VetoGuardedAccount.executeWithMandate(struct, sig, amount) on the agent's smart wallet.
   • Solana: builds a 2-instruction tx (Ed25519 verify + veto_guarded_program::execute_with_mandate) and submits to the Solana RPC.
4. Returns the receipt + on-chain tx hash.

Configuration

Environment variables (or pass as kwargs):

Decision-only mode

For cooperative-mode integrations (no on-chain settlement, just verdict + receipt):

result = await pay(
    url=url, max_amount="$0.05", decision_only=True
)
# result.tx_hash is None; result.decision + result.receipt are populated.

Useful when:

• The rail handles settlement upstream (e.g., pay.sh's hosted x402 facilitator)
• You're running a dry-run before flipping enforcement on
• You're auditing decisions without enforcing them

Tests

pip install -e .[dev,evm,solana]
pytest

Public artifacts

License

MIT.