Bestiary · specimen

The Mandatum

Mandatum signatum ap2

Fig. — the mark of the mandatum quantum · quo quamdiu · quis cap · scope expiry · sig

Read it like a naturalist: diet is what sustains it; predators are what kill its kind. Full legend →

Habitat
The gap between 'my agent decided' and 'my money moved' — nests in signed JSON envelopes passed between user agents, merchants, and payment endpoints
Diet
User intent, consumed at signing time; scope and caps are its only nutrition — it starves (by design) on anything vague
Lifespan
Deliberately short; expires on schedule or dies instantly when revoked. The species survives by prolific reproduction, not longevity
Predators
Replay attacks, scope creep, consent-fatigue UX that tricks humans into signing fat mandates, and courts that haven't ruled on what a signature by proxy means
Symbiotes
Verifiable credentials that vouch for its parent agent, payment rails that honor it, audit logs where its corpse remains legible
Markings
Four bands, always in this order: cap · scope · expiry · signature. Specimens missing any band should be treated as a different, more dangerous species
First observed
2025, announced into the wild by a large search company and some sixty ecosystem partners

The Mandatum is not money and must not be mistaken for it. It is a permission with a corpse — a signed, scoped, expiring record that an identified human authorized an identified agent to spend up to an identified amount on an identified thing. When the transaction is later questioned (and the interesting ones always are), the Mandatum is what everyone gathers around.

Its anatomy is the allowance anatomy (cut-0101): cap, scope, expiry, revoke. The signature binds them to a principal. What the species actually does for its ecosystem is convert liability from vapor into structure — before the Mandatum, “my agent bought this and I never agreed” was a customer-service scream; after it, it is a verifiable claim with a yes-or-no answer.

Field caution: the creature is only as honest as the moment of its signing. A mandate signed through a dark-pattern consent screen carries the same beautiful markings as a legitimate one. The species’ great predator is not cryptography-breaking — it is UX that farms humans for fat signatures.

Watch this animal. Whichever rail its descendants nest in first, at kirana scale (cut-0215), wins an era.

Cooked from