Trust boundaries
Three processes. One narrow handoff.
Secrets stay out of the agent transcript. The Ledger signs authority; it never signs individual x402 payments.
A / buyer — Pi agent
Receives intents, decisions, receipts, and service output. Never sees keys or plaintext credentials.
B / broker — finityd
Runs discovery, negotiation, policy evaluation, capability minting, and trace building.
C / vault — vault-worker
Decrypts sealed bundles for a lease, injects credentials, enforces egress, and pays.
Full architecture
See docs/ARCHITECTURE.md for the complete design.