Agent Middleware

About

A gateway placed in front of an agent's risky tools such as refunds, payouts and deploys. Each action needs a signed permit, runs at most once per request key, and produces a signed receipt that can be verified offline. Receipts sign hashes of the request and response, so they cannot prove a remote effect happened, and the project states this is not exactly-once delivery.