{
  "schema": "sml.bounded-authorization.v1",
  "status": "IMPLEMENTED_NOT_SPEND_ENABLED",
  "product": "SML LIVE",
  "purpose": "Short-lived caller-policy approval for one exact fresh x402 challenge before any wallet signing step.",
  "network": "eip155:8453",
  "asset": "USDC",
  "max_ttl_seconds": 180,
  "bindings": [
    "session",
    "fresh_challenge_digest",
    "resource",
    "payTo",
    "atomic_amount",
    "per_call_limit",
    "session_limit"
  ],
  "explicit_non_capabilities": {
    "wallet_signature": false,
    "x402_PAYMENT_SIGNATURE": false,
    "settlement": false,
    "accepted_delivery": false,
    "autonomous_spend": false,
    "wallet_key_to_model": false
  },
  "state_rule": "A bounded authorization proves policy approval only. It MUST NOT be treated as an x402 PAYMENT-SIGNATURE or settlement proof.",
  "activation_rule": "Real payment execution remains disabled until an explicit caller approval surface, isolated wallet signer, verified settlement evidence, and accepted-delivery verifier are all independently live and tested.",
  "source": "https://gitlab.com/timothy.walton45/sml-portfolio/-/blob/main/sml-x402-app/bounded-authorization.mjs",
  "truth": "The authorization primitive is implemented and test-covered, but it is not yet wired to a production wallet signer or GPT-Live tool path."
}