Decern by PriviNet · AI Financial & Signing Airlock
Let AI Agents Execute Workflows Without Giving Them Your Keys or Your Bank Account.
Decern is designed to sit between your AI agents and your company payment rails, Stripe accounts, or digital wallets like a hard financial safety lock. If an agent gets tricked or tries to overspend, Decern is structured to block the transfer before a single dollar leaves and produce a tamper-evident decision receipt.
Current status: Research prototype on Bitcoin signet. Frozen review candidate ready for independent cryptographic review (engagement being arranged). US provisional patent 64/130,485 pending. Now recruiting design partners.
For Executives, CFOs & Product Leaders
Plain-English walkthrough: see why autonomous agent payment SDKs fail by default, then test 5 real-world AI payment attacks against a live $1,000.00 Company CFO Budget.
For CTOs, Systems Engineers & Security Reviewers
Inspect the dedicated technical architecture page covering the pre-signing boundary, shared budget controls, post-quantum policy signatures, offline evidence receipts, and Bitcoin Signet test transactions.
AI Agent Proposes a Payment or Action
Agents hold zero live keys by design and never touch raw payment credentials.
Decern Checks Policy Outside the Agent
Designed to check recipient allowlists, per-transaction limits, and shared team budgets across concurrent workers.
Safe Execution or Instant Pre-Signing Block
Approved actions proceed inside the protected boundary; out-of-policy or prompt-injected transfers are stopped before signing.
Independent Third-Party Disclosures (October 2026)
Why now
Autonomous AI agents are already being wired directly into corporate payment rails and digital wallets, where SDK-level defaults cannot be left to police themselves. In the V12 review of the x402 agent-payment protocol (October 22, 2026), researchers uncovered 25 vulnerabilities (3 critical) and showed that the default client enforced no spending limit. Three days later, the Cloud Security Alliance research note (October 25, 2026) detailed how those x402 agent-payment SDK flaws and silent patches exposed auto-signing wallets, reinforcing why spending limits and signing authorization belong in an external pre-signing boundary.
Interactive Business Sandbox · Plain-English Simulation
Interactive 5-Scenario Adversarial Attack Arena
When companies let AI agents pay vendors or move treasury funds, a single prompt injection, retry loop, or multi-agent race can drain an account in seconds. Decern is designed to sit as a hard financial safety airlock in front of your payment rail or wallet signer: it is structured to check the exact recipient and dollar amount on the wire, lock shared parent-child budgets so two agents do not overdraft the parent account, and halt unauthorized requests before a signing key ever wakes up.
Click Any AI Payment Attack Scenario Below
Company CFO Budget ($1,000 Cap) & Sub-Agent Limits
Two AI sub-agents each have an $800.00 limit ($1,600.00 combined), but both draw from the same $1,000.00 Company CFO Budget. Decern is structured to lock parent and child budgets together so total spend does not exceed $1,000.00.
Plain-English Verdict: What Just Happened?
258 workspace tests passing. 11 attack scenarios blocked pre-signing in internal testing, 0 unauthorized signing attempts.
+ Show Simulated Decision Log & Live SHA-256 Receipt (For Technical Review) Technical View
Simulated Pre-Signing Decision Log
Verify a Receipt Offline
Awaiting Demo RunWhen a scenario executes, this panel displays the simulated JSON decision receipt and computes its live SHA-256 integrity digest in your browser. You can check the receipt below or simulate a +$1.00 post-decision edit.
Awaiting demo run. Select any Attack Scenario on the left (or click "Auto-Play All 5 Attacks") to run a simulation and compute a live SHA-256 receipt in your browser.
Design Partner Program: limited slots. Scoped pilot following phase-1 independent review. Email brad@privinet.net.
We are partnering with a limited number of teams building autonomous agent payment workflows, corporate payout automation, or digital-asset treasury operations. Scoped pilots begin following phase-1 independent review. Email brad@privinet.net to discuss your workflow and reserve a design partner slot.
Technical Architecture & Public Signet Evidence
Inspect the dedicated technical architecture page covering the pre-signing boundary, shared budget controls, post-quantum policy signatures, offline evidence receipts, and Bitcoin Signet test transactions.