Pilot path — install, witness, verify

One page for design partners and pilots. Open-core packages are public; hosted witness is DEV (not production bank SLA).

Honesty boundary. Payment success ≠ AWP PASS. AWP PASS proves integrity-since-witness only (signature, schema, inclusion when present) — not that money moved, that every act was recorded, or that the origin act was authentic.

1. Install open-core packages

npm i agent-witness-protocol paybot-sdk paybot-mcp

Versions (as of pilot board): protocol 0.2.0 · sdk 0.5.x · mcp 0.3.x.

2. Offline sample verify (no cloud)

npx awp verify node_modules/agent-witness-protocol/samples/receipt.json
# Expect: RESULT: PASS

3. Hosted DEV witness (optional pilot evidence)

Surface	URL
API health	witness-dev.paybotfin.com/health
Console	console.paybotfin.com
Paste → verify	/verify.html
Admin	/admin.html (ADMIN_SECRET)

Admin — create tenant (checkpointEvery: 1 for fast seals).
Ingress — POST /v1/witness with Bearer sk_test_… + Idempotency-Key.
Seal — POST /v1/admin/tenants/:id/checkpoint.
Receipt — GET /v1/receipts/:record_id → map to FullReceipt → verify UI or CLI.

# From paybotfin-witness repo (operator machine)
npm run verify:hosted
# → RESULT: PASS on samples/hosted-e2e-receipt.json

4. Wire paybot-core (pilot env only)

# When NODE_ENV=production, JWT_SECRET min 32 chars is required.
export WITNESS_INGRESS_URL=https://witness-dev.paybotfin.com/v1/witness
export WITNESS_API_KEY=sk_test_YOUR_TENANT_KEY
# Optional: WITNESS_TIMEOUT_MS=2000
# Witness failures never fail authorize (fire-and-forget).

5. What you may claim in a pilot

OK to claim	Do not claim
Open protocol AWP; offline verify; DEV hosted log; optional core emit	Production bank certification; independent co-signing; “AI verified payment”; complete capture of all acts

Links

AWP on GitHub npm protocol Interactive demo

Contact: [email protected] · FriendlyAI Oy