Treasura

@Jenish-fdo·added 2026-10-24

Treasura gives an agent scoped, expiring spending authority and proves afterwards what it did. contracts/src/MandateRegistry.sol stores per-business mandates with payment categories, a recipient allowlist, per-transaction, daily, weekly and monthly caps, single-use flags and risk tiers; consume admits a payment only inside those bounds, and amounts above the human-approval threshold need an EIP-712 signature from the owner (EOA or ERC-1271). Neither contract has an owner, admin, pause switch or proxy. contracts/src/DecisionLog.sol keeps an append-only, per-business hash chain of every payment, refusal and escalation with idempotent client refs, parent links and verifyRecord. POST /mandates/:id/pay in the Express backend (backend/src/services/paymentService.ts) validates, consumes the spend, sends USDC through Arc's native USDC contract and logs the decision with the transfer hash, covered by end-to-end tests against arc-anvil. Foundry suites cover the registry (83 tests) and the log (31 tests) and contracts/script/arc-testnet-bootstrap.sh reproduces the Arc testnet deployment.