Skip to main content

Company · Security

Every payment is checked on the server, before it moves.

The model prepares the intent. Mandates, limits, review rules and records run on CodeSpar, outside the model. Anything outside the mandate stops before it reaches a payment method.

Report a vulnerability to security@codespar.dev.

One request · every check before the rail demo
Mandate signatureed25519 · issuer and agent · mnd_22sh_v2valid
Scope and expirycompute · APIs · suppliers · until Dec 31, 2026inside
Limitslimit R$ 3,000 per transaction · hard budget R$ 20,000−R$ 4,200.00held for reviewapproved
Recipient and methodNimbus Cloud Ltda · boleto · on the allowed listallowed
Recordrec_951c · signed receipt · audit trail entryrecorded

Sandbox run · demo data

What runs before money moves

Six checks. No single point of trust.

01

Signed mandates, not raw keys.

Agents never hold your API key or a card. Each payment is authorized by a mandate signed by the issuer and the agent, scoped to an agent, limits, recipients and a time window. Revocable in one call.

mnd_22sh_v2 demo
issuer signaturevalid
agent signaturevalid
revocationone call

02

Rules checked on the server.

Per-transaction limit, hard budget, allowed recipients and methods, expiry. Checked by CodeSpar, not by the model, before anything is sent.

Checks · prp_77f1 demo
limit R$ 3,000 per transactionheld
hard budget R$ 20,000inside
recipient on the listallowed

03

A person decides on review.

Requests matching your approval rules wait for review. Nothing is sent until an approver decides. Verified approver identity is rolling out.

Review queue demo
prp_77f1 · ops@aurora.store−R$ 4,200.00heldapproved
verified approverrolling out

04

Records you can verify.

Every settled spend gets a signed receipt anyone can verify with our public key. The audit trail records every governed action and exports as JSON with a signed manifest.

rec_951c demo
ed25519:9f2c…7ab1verified
audit export · signed manifestavailable

05

Keys per environment.

Test and live keys are separate. Test mode never moves real money. Keys are scoped to a project and can be rotated.

Keys demo
csk_test_… · sandboxno real money
csk_live_… · productionafter KYC/KYB

06

Stop everything in one call.

Revoke a mandate and the agent's new payments stop. Freezing a whole wallet at once is rolling out.

Incident demo
revoke mnd_22sh_v2immediate
freeze the whole walletrolling out

Sandbox run · demo data

What we hold, and what we claim

No card numbers in your agent. No certification claimed before it is published.

Data

Agents hold no credentials.

Agents call CodeSpar with a key; they never hold bank or card credentials. Card storage is rolling out with production.

Certifications

Nothing claimed until completed and published.

SOC 2 and ISO work is rolling out. This page will name a certification only when the report exists.

Disclosure

Responsible disclosure.

Report security issues to security@codespar.dev. We acknowledge within two business days.

Posture · today demo
card data in your agentnever
keysper environment · rotatable
receiptssigned · publicly verifiable
certificationsin progress rolling out
security@codespar.dev2 business days

Sandbox run · demo data

Found something? Tell us first.

Responsible disclosure at security@codespar.dev. We acknowledge within two business days and keep you informed until it is fixed.

verify a receipt · demodemo
$ npm run verify -- receipts/rec_951c.json signature ed25519:9f2c…7ab1 public key · api.codespar.dev/.well-known/codespar-receipt-keys.json ✓ verified · body recomputed (chain v4) · approval matched

Sandbox run · demo data

CodeSpar · Security