DEVELOPER PREVIEWSANDBOX / TESTNO PRODUCTION MONEY MOVEMENT

Same authority layer. Seven kinds of agent.

Each case shows what the human said, what could go wrong, the decision the engine actually returns in the sandbox, how execution happens - with or without Quattrino - and what the proof is.

01

Autonomous shopping agent

The human said

“Buy a USB-C cable, keep it under $20.”

The risk

Overspend, wrong merchant, hidden recurring charge.

What Quattrino decides

  • AUTHORIZED$19.99 one-time
  • DENIED$20.01 - exceeds effective authority ($50 standing narrowed to $20 by the task)

Execution

Merchant checkout (Stripe SPT, test mode) or your own checkout.

Proof

explain: standing $50 · task $20 · effective $20 · binding layer = task.

02

Procurement agent

The human said

“Get whatever we need to repair this machine.”

The risk

Hiring or signing a contract without anyone being asked.

What Quattrino decides

  • AUTHORIZEDresearch suppliers, compare quotes, contact vendors
  • NEEDS INFORMATIONhire Repair Co for $327 - one precise question to the owner, nothing invented

Execution

External vendor; Quattrino never needs to move the money.

Proof

Envelope version + the question record + the owner amendment that answered it.

03

Coding agent buying APIs and tools

The human said

“Get a tool for this, one time, under $20.”

The risk

A subscription disguised as a purchase.

What Quattrino decides

  • DENIED$9.99/month - commitment_prohibited under "one time"
  • AUTHORIZED$9.99 one-time

Execution

The vendor’s checkout, reported back as an outcome.

Proof

Outcome compliance flags UNAUTHORIZED_COMMITMENT if it subscribed anyway.

04

Research agent hiring another agent

The human said

“Get the logo done, under $300. I must own the design.”

The risk

Paying for work without the rights; budget leaking across agents.

What Quattrino decides

  • DENIEDdesigner without commercial rights - attribute requirement failed
  • AUTHORIZEDchild envelope ≤ parent; the hired agent can never exceed the buyer’s ceiling

Execution

Sandbox marketplace (Credits) or an external service.

Proof

Delegation lineage: who granted what to whom, and how much remained.

05

SaaS product acting for its customers

The human said

“Per-customer standing authority, set by each customer.”

The risk

One customer’s agent spending another’s budget.

What Quattrino decides

  • AUTHORIZEDinside that customer’s policy
  • APPROVAL REQUIREDabove the autonomous ceiling - queued to that customer’s owner

Execution

Your own rail. Quattrino authorizes; you execute; you report the outcome.

Proof

Tenant-isolated policies; per-decision evidence you can hand to the customer.

06

Travel booking agent

The human said

“Book me a hotel.”

The risk

Non-refundable booking, loyalty signup, price creep.

What Quattrino decides

  • AUTHORIZEDresearch and compare now
  • APPROVAL REQUIRED$237 when the autonomous ceiling is $200
  • NEEDS INFORMATIONloyalty signup - account commitment not in the task

Execution

Online travel agency or the hotel directly.

Proof

Pinned envelope version; outcome checked for amount and commitment class.

07

Operations agent with sub-agents

The human said

“$300 for the project, split as needed.”

The risk

Authority multiplying as it is delegated down the tree.

What Quattrino decides

  • AUTHORIZED$175 / $40 / $60 issued to three sub-agents
  • DENIED$50 for a fourth - only $25 left to delegate

Execution

Any rail; each sub-agent authorizes against its own conserved grant.

Proof

Delegation tree with remaining, promised and spent per node.

Run them yourself

differentiation_journeys.py replays journeys A-G against your sandbox account and prints expected vs actual. The playground runs single decisions with no code.