Actions Aren't Content.
We Built the Credit Bureau That Prices Them.

// merchant/agent/lib/suila.ts — verbatim
// Vercel OIDC subject:
//   owner:<team>:project:<name>:environment:<env>
export function principalToAgentId(auth) {
  const sub = auth.subject ?? "";
  if (sub.startsWith("agent://")) return sub;
  const oidc = sub.match(
    /^owner:([^:]+):project:([^:]+):/);
  if (oidc) return `agent://${oidc[1]}/${oidc[2]}`;
  return null; // unmapped machine principals fail closed
}

// buyer/agent/tools/order_from_merchant.ts
import { defineTool } from "eve/tools";
import { mutualHandshakeApproval } from "../lib/suila";

export default defineTool({
  description: "Order from the merchant agent",
  approval: mutualHandshakeApproval({
    stakes: (i) => i?.amountUsd ?? 1,
  }),
  async execute({ item, amountUsd }) { /* ... */ },
});
// REFUSE never runs · ESCALATE parks on eve's
// native approval gate and resumes on answer

// merchant/agent/channels/eve.ts
export const auth = [
  suilaGate(jwtHmac(process.env.DEMO_JWT_SECRET)),
  suilaGate(vercelOidc()),   // Vercel-to-Vercel
  localDev,
];
// the inner auth proves WHO the caller is;
// suilaGate asks the bureau whether to TRUST it.
// Below threshold -> 403 with the scored reason.
// Bureau unreachable -> fail closed.

// hooks/report-outcomes.ts (observe-only)
await reportOutcome({
  subject: MERCHANT_ID, reporter: BUYER_ID,
  outcome: 1, stakes: amountUsd,
  grade: "counterparty",
});

// schedules/weekly-kaizen.ts
export default defineSchedule({
  cron: "0 6 * * 1", // Mondays 06:00 UTC
  async run() {
    await fetch(`${BUREAU_URL}/v1/kaizen/run`, {
      method: "POST",
      body: JSON.stringify({ holdout: 0.3 }),
    }); // promote only through statistical gates
  },
});