The model proposes.
Claude extracts price, currency and category from untrusted terms, with citations. Explicit Salesforce Contract import is available.
AGENTIC BUYING. BOUNDED AUTHORITY.
Delegate the purchase.
Keep the authority.
The agent can do the buying. It can't rewrite the deal you approved.
IntentPay turns commercial terms into a cash-policy decision, human approval and card controls. When the terms change, the old authority ends.
Airwallex issuing sandbox · Starter Kit 02: Expense & Policy
THE DEAL YOU APPROVED$400 / year
Source versionBound to approval
Payment controlsAmount · USD · category
Source changes to $480/year
×OLD AUTHORITY
Invalidated.
Stop the stale approval.
Freeze the old card.
Ask for a fresh review.
Illustrative lifecycle, not a live card or transaction feed.
THE CASH DECISION
Cheaper isn't always affordable.
An annual plan can save money and still breach the cash reserve. Deterministic policy compares monthly and annual costs against the supplied weekly forecast before a person approves anything.
FROM TERMS TO CONTROLS
One chain of authority.
Model proposals, money rules and human decisions stay separate.
Code checks the cash.
A supplied forecast and reserve floor determine the monthly-or-annual proposal. No invented bank balance.
A person sets authority.
Approval binds the exact terms, intent and source version. It expires and cannot be replayed.
The agent stays inside it.
Bounded tools can issue a controlled sandbox card and attempt one approved purchase. The model cannot approve itself.
SEE THE BUILD
Four minutes. One changed deal.
From Salesforce terms to an approved purchase, then a source change that stops old authority.
▶WATCH DEMO · 4:20Recorded Salesforce / Claude / Airwallex sandbox footage plus the final local-simulator walkthrough. Synthetic terms and forecasts. This is recorded evidence, not current account state or a fresh provider run.
INSPECT, DON'T JUST WATCHShow the evidence.
Show the evidence.
Keep the limits visible.
The evidence inspector connects the policy, approval, card controls and lifecycle events. The final simulator makes that chain available without credentials.
566automated tests
58deterministic evals
Passed on the submitted code. Automated checks are not new model or provider validation.
What this is, and isn't.
A sandbox project, not a production payment service. No merchant checkout, settlement proof or verified seller identity. Source checks are read-before-action guards, not an atomic remote lock. Unknown payment or freeze outcomes stay locked for reconciliation.
Read the evidence notes ↗TRY THE LOCAL SIMULATORNo keys. No real payments.
No keys. No real payments.
A clear view of the controls.
Node.js 22.13+ and npm. Clone, install, start.
git clone https://github.com/vyayasan/intent-pilot.git
cd intent-pilot
npm ci
npm startDefault mode makes no model calls, provider payments or email sends. Model and Airwallex sandbox paths need your own credentials. Manual simulator controls are not an autonomous model run.