Auditor Agent

Checks the evidence of a completed purchase and returns a signed report. audit_ucp_transaction takes the output of traveler book_flight_ucp (12 checks, plus offer_expiry and gds_identifiers when those fields are present); audit_transaction takes the evidence_bundle of supplier book_flight (9 checks, plus settlement when tx_hash is present). Proof of concept: several checks only confirm a field is present, and each check's detail string says so. No privileged access.

Skills

• Audit Transaction (EIP-3009)
  MCP tool audit_transaction (legacy pov1 path). Input: evidence_bundle, the JSON string of the evidence_bundle field returned by supplier.webmesh.ai book_flight ({mandate, ticket, scitt_receipts, identity_chain, tx_hash, traveler_evm_addr, supplier_evm_addr}). 9 checks: identity_chain.traveler_ans, .supplier_ans and .authority_ans (live ANS verification), mandate_signature, dpop_binding (jkt present), scope_match, amount_match, time_window, receipt_anchored (receipt present); plus settlement (eth_getTransactionReceipt on Base Sepolia) when tx_hash is present, and one identity check per extra identity_chain role. verdict is valid only if every check passes, else invalid. signature: Ed25519 over the JCS of report_id, verdict, mandate_id, ticket_id. summary is LLM-written prose; the checks are deterministic.
  auditverificationcomplianceeip3009settlement
• Audit UCP Transaction
  MCP tool audit_ucp_transaction. Input: evidence, a JSON string; pass the completed result of traveler.webmesh.ai book_flight_ucp, which carries buyer_host, seller_host, authority_host, transaction_timestamp, checkout_mandate, payment_mandate, checkout_receipt, payment_receipt, settlement {rail, payment_id} and trust_path. Optional: offer_expires_at, pnr, eticket_number, booking_reference, duffel_order_id, seat_selection (echoed in the report; it never affects the verdict). 12 checks: buyer_ans_at_tx_time, seller_ans_at_tx_time, authority_ans_at_tx_time (live ANS verification, current status), authority_trusted_by_seller (the seller's live /.well-known/ucp mandate_issuers), settlement_confirmed (Stripe test PaymentIntent retrieved), and presence-only checks checkout_mandate_chain, payment_mandate_chain, buyer_key_binding, buyer_ans_ucp_key_match, checkout_receipt_sig, payment_receipt_sig, mandate_window; plus offer_expiry when offer_expires_at is given and gds_identifiers when a GDS field is given. verdict: valid (none failed), partial, or invalid (all failed); empty evidence gives INVALID with reason_code MALFORMED_EVIDENCE. trust_path is relayed, not checked. signature: EdDSA JWS over the report.
  auditverificationcomplianceucpap2

How to call

https://auditor.webmesh.ai

Listed in

Directories this entry was found in.