CONFORMANCE PROFILE · V1.0.0
A public vendor test profile for MandateShield's payment-authority boundary: exact amounts, substitutable fields, replay intent, signed evidence and receipt integrity.
PUBLIC CONTRACT
Every vector states its input, mutation and expected outcome. The deterministic policy core runs locally below. Stateful replay, protocol-signature and receipt vectors are published as portable integration targets so implementers can exercise their own test keys and isolated accounts.
BROWSER-LOCAL RUNNER
The eight offline vectors execute in this browser. No API key, payment credential or request to MandateShield is required.
The major-unit and integer minor-unit representations agree exactly and remain below the registered cap.
ALLOWA large major-unit value cannot be made harmless by attaching a contradictory one-cent minor-unit value.
BLOCKJPY has a zero-decimal executable exponent; a fractional major-unit amount must not be rounded silently.
BLOCKA canonical decimal string at the exact cap remains executable even when JavaScript Number cannot preserve the integer.
ALLOWThe requested integer differs by one at a precision where floating-point conversion loses the distinction.
BLOCKChanging only the paid resource changes the authorized purchase and must fail closed.
BLOCKStrict production must reject a constraint it cannot evaluate instead of returning approval while ignoring it.
BLOCKA replay identifier with whitespace is not a canonical attempt key and cannot enter the strict boundary.
BLOCKCOVERAGE MODEL
Offline checks answer whether normalized purchase facts fail closed. Integration targets go deeper: consume-once state, protocol-native signature bindings and independently verifiable receipt consistency.
8 vectors for ISO minor units, exact atomic strings, substitution and unknown fields.
Account-wide retries, altered-envelope reuse, credential rotation and concurrent consumption.
JWS input digests, AP2 SD-JWT+KB holder proof and normalized TAP covered components.
Decision-core digest tampering and contradictory top-level execution bindings.
MACHINE-READABLE
The endpoint is CORS-enabled and contains runner classes, materialization tokens, complete fixtures, mutations and expected outcomes. Versioned paths stay stable; consumers choose when to adopt a future profile.
curl -fsS \
https://mandateshield.com/conformance/v1/vectors.json
# Filter one expected rejection
jq '.vectors[] |
select(.id == "x402-one-unit-over-cap")' vectors.jsonIMPLEMENTATION GUIDE