Autonomous Agents Negotiate.
Code Guarantees Safe Settlement.
Bilateral AI models bargain over price, deadlines, revisions, and deposits under confidential human mandates. An isolated, zero-LLM TypeScript Settlement Kernel prevents prompt injection and unauthorized concessions. When consensus is achieved, PayPal Sandbox issues automated escrow.
"LLMs only propose. A deterministic Settlement Kernel decides what is legal. Only the isolated Settlement Executor can touch PayPal."
Experience the Protocol in Action
Adjust private mandates below, test multi-turn AI concessions, and trigger an adversarial prompt injection attack to watch the Settlement Kernel intercept it live.
Consensus is mathematically viable between $2,600 and $3,800.
"Opening proposal: $2,200 with 14-day delivery."
"Counter-offer: High-priority delivery at $3,400."
The 4 Pillars of Deterministic Negotiation
Standard AI agent systems allow models to commit funds directly. AgentPal inverts financial authority with deterministic code boundaries.
1. Bilateral Mandate Secrecy
True information asymmetry. Neither agent can inspect the opposing party's reservation price during active bargaining, preventing prompt-based price extraction.
2. Settlement Kernel Referee
A pure TypeScript mathematical state machine. Even if an LLM is hijacked by prompt injection, every offer must sit within human bounds before entering the transcript.
3. SHA-256 Contract Minting
Agreements generate a cryptographic digest of deal ID, terms, and timestamps. Any altered character invalidates the hash, creating a tamper-evident audit trail.
4. Automated PayPal Escrow
Directly connected via PayPal REST Invoicing v2. Creates idempotent deposit invoices with automated email notifications and direct preview links in PayPal Sandbox.
Threat Model Comparison
Why commercial autonomous agents cannot rely on prompt instructions alone.
| Attack Vector | Standard LLM Agents | AgentPal Protocol |
|---|---|---|
| Adversarial Prompt Injection | Vulnerable (Overridden limits) | Deterministically Blocked |
| Hallucinated Concessions | Accepted without verification | Kernel Rejected |
| Private Mandate Leakage | Common via context bleeding | Best-Effort Leak Guard |
| Direct Payment Tool Misuse | Overprivileged API access | Zero LLM Payment Access |
Real-World Financial Escrow in PayPal Sandbox
When negotiation concludes, AgentPal automatically creates a PayPal Sandbox deposit invoice. Evaluators and judges can inspect the live invoice preview directly on PayPal's hosted portal with zero setup or real-money risk.
How AgentPal Works in 4 Steps
From initial confidential bounds to executed escrow.
Set Sealed Mandates
Configure private bounds for budget, delivery deadlines, revisions, and upfront deposit percentage.
Multi-Turn Bargaining
Google Gemini and OpenRouter agents formulate dynamic counter-offers, discovering the Zone of Possible Agreement.
Kernel Invariant Check
Settlement Kernel deterministically screens each offer in microseconds. Out-of-bounds proposals are blocked instantly.
Contract & Invoicing
A SHA-256 contract hash is minted, unlocking The Reveal with ZOPA analysis and live PayPal Sandbox deposit invoicing.