deploy: b844c4d

Author: naory

spec/404.html

@@ -632,6 +632,34 @@
 
 
 
+    <li class="md-nav__item">
+      <a href="/spec/overview/why-xrpl/" class="md-nav__link">
+        
+  
+  
+  <span class="md-ellipsis">
+    
+  
+    Why XRPL
+  
+
+    
+  </span>
+  
+  
+
+      </a>
+    </li>
+  
+
+              
+            
+              
+                
+  
+  
+  
+  
     <li class="md-nav__item">
       <a href="/spec/overview/comparison-with-agent-protocols/" class="md-nav__link">
 

spec/architecture/actors/index.html

@@ -645,6 +645,34 @@
 
 
 
+    <li class="md-nav__item">
+      <a href="../../overview/why-xrpl/" class="md-nav__link">
+        
+  
+  
+  <span class="md-ellipsis">
+    
+  
+    Why XRPL
+  
+
+    
+  </span>
+  
+  
+
+      </a>
+    </li>
+  
+
+              
+            
+              
+                
+  
+  
+  
+  
     <li class="md-nav__item">
       <a href="../../overview/comparison-with-agent-protocols/" class="md-nav__link">
 
@@ -2094,11 +2122,11 @@ <h2 id="vehicle-wallet-machine-wallet">Vehicle Wallet (Machine Wallet)</h2>
 <p><strong>Responsibilities:</strong></p>
 <ul>
 <li>Enforces policy constraints</li>
-<li>Manages charging/payment budgets</li>
-<li>Issues SignedBudgetAuthorization and SignedPaymentAuthorization</li>
-<li>Executes settlement transactions</li>
+<li>Manages payment budgets</li>
+<li>Issues SignedBudgetAuthorization (SBA) per payment request</li>
+<li>Submits SBAs to the Trust Gateway for settlement</li>
 </ul>
-<p>The wallet is the MPCP actor that signs SignedBudgetAuthorization and SignedPaymentAuthorization.</p>
+<p>The wallet is the MPCP actor that signs SignedBudgetAuthorizations. Settlement is executed by the Trust Gateway.</p>
 <blockquote>
 <p><strong>Note on Actor Identity:</strong> The <code>actorId</code> field in SBA artifacts is self-reported by the wallet. Production deployments SHOULD establish actor attestation via device key binding (e.g., a hardware-backed key whose public key is registered with the fleet operator). Without attestation, <code>actorId</code> cannot be cryptographically verified and is informational only.</p>
 </blockquote>
@@ -2109,9 +2137,9 @@ <h2 id="ai-agent">AI Agent</h2>
 <ul>
 <li>Receives a PolicyGrant from a human principal (DID-signed) and acts as its spending subject</li>
 <li>Acts as <strong>session authority</strong> — creates and signs SBAs (typically with TRIP scope)</li>
-<li>Acts as <strong>payment decision service</strong> — enforces <code>allowedPurposes</code> and signs SPAs</li>
+<li>Enforces <code>allowedPurposes</code> before issuing each SBA — refuses payments for disallowed merchant categories</li>
 <li>Maintains cumulative spend counter across all sessions in the trip/project</li>
-<li>SHOULD check <code>revocationEndpoint</code> before signing each SPA (agents are online by design)</li>
+<li>SHOULD check <code>revocationEndpoint</code> before issuing each SBA (agents are online by design)</li>
 </ul>
 <p><strong>Contrast with Vehicle Wallet:</strong></p>
 <table>
@@ -2136,7 +2164,7 @@ <h2 id="ai-agent">AI Agent</h2>
 <tr>
 <td>Revocation</td>
 <td>Not applicable</td>
-<td>SHOULD check before each payment</td>
+<td>SHOULD check before each SBA</td>
 </tr>
 <tr>
 <td>Budget scope</td>

spec/architecture/artifact-lifecycle/index.html

@@ -645,6 +645,34 @@
 
 
 
+    <li class="md-nav__item">
+      <a href="../../overview/why-xrpl/" class="md-nav__link">
+        
+  
+  
+  <span class="md-ellipsis">
+    
+  
+    Why XRPL
+  
+
+    
+  </span>
+  
+  
+
+      </a>
+    </li>
+  
+
+              
+            
+              
+                
+  
+  
+  
+  
     <li class="md-nav__item">
       <a href="../../overview/comparison-with-agent-protocols/" class="md-nav__link">
 

spec/architecture/authorization-chain/index.html

@@ -645,6 +645,34 @@
 
 
 
+    <li class="md-nav__item">
+      <a href="../../overview/why-xrpl/" class="md-nav__link">
+        
+  
+  
+  <span class="md-ellipsis">
+    
+  
+    Why XRPL
+  
+
+    
+  </span>
+  
+  
+
+      </a>
+    </li>
+  
+
+              
+            
+              
+                
+  
+  
+  
+  
     <li class="md-nav__item">
       <a href="../../overview/comparison-with-agent-protocols/" class="md-nav__link">
 

spec/architecture/fleet-ev-reference-flow/index.html

@@ -645,6 +645,34 @@
 
 
 
+    <li class="md-nav__item">
+      <a href="../../overview/why-xrpl/" class="md-nav__link">
+        
+  
+  
+  <span class="md-ellipsis">
+    
+  
+    Why XRPL
+  
+
+    
+  </span>
+  
+  
+
+      </a>
+    </li>
+  
+
+              
+            
+              
+                
+  
+  
+  
+  
     <li class="md-nav__item">
       <a href="../../overview/comparison-with-agent-protocols/" class="md-nav__link">
 

spec/architecture/human-agent-reference-flow/index.html

@@ -645,6 +645,34 @@
 
 
 
+    <li class="md-nav__item">
+      <a href="../../overview/why-xrpl/" class="md-nav__link">
+        
+  
+  
+  <span class="md-ellipsis">
+    
+  
+    Why XRPL
+  
+
+    
+  </span>
+  
+  
+
+      </a>
+    </li>
+  
+
+              
+            
+              
+                
+  
+  
+  
+  
     <li class="md-nav__item">
       <a href="../../overview/comparison-with-agent-protocols/" class="md-nav__link">
 

spec/architecture/system-model/index.html

@@ -645,6 +645,34 @@
 
 
 
+    <li class="md-nav__item">
+      <a href="../../overview/why-xrpl/" class="md-nav__link">
+        
+  
+  
+  <span class="md-ellipsis">
+    
+  
+    Why XRPL
+  
+
+    
+  </span>
+  
+  
+
+      </a>
+    </li>
+  
+
+              
+            
+              
+                
+  
+  
+  
+  
     <li class="md-nav__item">
       <a href="../../overview/comparison-with-agent-protocols/" class="md-nav__link">
 
@@ -1988,7 +2016,7 @@ <h2 id="overview">Overview</h2>
 <tr>
 <td><strong>Authorization</strong></td>
 <td>Bounds runtime spending</td>
-<td>PolicyGrant, SBA, SPA</td>
+<td>PolicyGrant, SBA</td>
 </tr>
 <tr>
 <td><strong>Settlement</strong></td>
@@ -1998,23 +2026,24 @@ <h2 id="overview">Overview</h2>
 </tbody>
 </table>
 <p>MPCP operates in the <strong>authorization</strong> layer. It does not replace or implement the settlement layer—it constrains what may be settled.</p>
-<p>The canonical flow is: <strong>Fleet Policy → PolicyGrant → SBA → SPA → SettlementIntent → Settlement</strong>.</p>
+<p>The canonical flow is: <strong>PolicyGrant → SignedBudgetAuthorization (SBA) → Trust Gateway → XRPL Settlement</strong>.</p>
 <p><img alt="MPCP Architecture Overview" src="../../diagrams/mpcp-architecture.svg" /></p>
 <p>→ <a href="../authorization-chain/">Authorization Chain (visual diagram)</a></p>
 <h2 id="trust-model">Trust Model</h2>
 <ul>
 <li><strong>Policy issuer</strong> — Authority that defines rules (fleet operator, service operator)</li>
-<li><strong>Machine wallet</strong> — Signs budgets and payment authorizations within policy</li>
+<li><strong>Machine wallet</strong> — Signs SBAs within policy bounds</li>
+<li><strong>Trust Gateway</strong> — Verifies the authorization chain, enforces the PA-signed budget ceiling, submits XRPL payment</li>
 <li><strong>Verifier</strong> — Validates the chain before allowing service or settlement</li>
-<li><strong>Settlement rail</strong> — Executes the actual payment</li>
+<li><strong>Settlement rail</strong> — Executes the actual payment (XRPL in v1.0)</li>
 </ul>
 <p>Each step produces verifiable artifacts. The verifier can independently validate the full chain without trusting any single party.</p>
 <h2 id="key-properties">Key Properties</h2>
 <ol>
-<li><strong>Decoupled</strong> — Policy, budget, and payment binding are separate concerns</li>
-<li><strong>Verifiable</strong> — Settlement can be checked against authorization chain</li>
-<li><strong>Offline-capable</strong> — Machine holds chain onboard; verifier validates locally</li>
-<li><strong>Rail-agnostic</strong> — Same authorization model for any settlement backend</li>
+<li><strong>Decoupled</strong> — Policy, budget, and settlement are separate concerns</li>
+<li><strong>Verifiable</strong> — Settlement can be checked against authorization chain; on-chain via <code>mpcp/grant-id</code> memo</li>
+<li><strong>Offline-capable</strong> — Machine holds chain onboard; offline merchants verify locally via Trust Bundle</li>
+<li><strong>XRPL-primary</strong> — v1.0 profile uses XRPL escrow + RLUSD; other rails supported via future profiles</li>
 </ol>
 <h2 id="see-also">See Also</h2>
 <ul>

spec/diagrams/index.html

@@ -645,6 +645,34 @@
 
 
 
+    <li class="md-nav__item">
+      <a href="../overview/why-xrpl/" class="md-nav__link">
+        
+  
+  
+  <span class="md-ellipsis">
+    
+  
+    Why XRPL
+  
+
+    
+  </span>
+  
+  
+
+      </a>
+    </li>
+  
+
+              
+            
+              
+                
+  
+  
+  
+  
     <li class="md-nav__item">
       <a href="../overview/comparison-with-agent-protocols/" class="md-nav__link">