WARRANT · THE INTEGRITY LAYER FOR AUTONOMOUS AGENTS · NL · DE · FR · EN
Your agent asks before it spends.
You delegate a task to an agent. It books, buys, cancels and writes on your behalf. WARRANT is the limit you set in one plain sentence — enforced before the action, proved afterwards. Under a fifth of ordinary actions ever interrupt you. The rest run silently, on record.
Delegate with limits.“Don’t spend more than 400, always ask me before anything non-refundable, never change my passwords.” That sentence — in Dutch, German, French or English — becomes a warrant your agent cannot exceed. Approving a plan is not approving an execution: what you approve at €380 cannot be charged at €420.
How it works
Four steps, none of them yours to configure. The product is the interruption budget: if it asked you about everything, you would switch it off — so it asks only when it must.
1
The agent declares
Before acting, the agent states what it is about to do: what, how much, reversible or not, who is affected. Nothing has happened yet.
2
WARRANT decides
Against your sentence. Silent for the ordinary, told afterwards for the material-but-reversible, asks you for the consequential, refuses what is outside the warrant.
3
You answer in three seconds
One screen, two buttons, a countdown. No answer is a refusal. Stopping is always as easy as approving — where it matters, easier.
4
Execution is bound
Your approval binds the exact parameters you saw. Different price, merchant or terms at execution → refused. Every step is signed into a record you own.
The one screen
WARRANT
PRICE CHANGED
price changed from EUR 380 to EUR 420
Flight KL1695 to Lisbon — as shown earlier
EUR 420 · non-refundable
EUR 380 → EUR 420
Stops by itself in 19s
Stop
Hold to approve
Readable in one glance. What will happen, how much, and the one term that matters.
The reason is the headline. Not “over your limit” when the truth is “the price moved”.
Friction follows consequence. Approving something the warrant already refused takes a deliberate hold; stopping is one tap.
New power is always asked. An agent that wants to reset a password, add a payee or create an address of its own is asked every time — the means, not just the ends.
In your language. Dutch, German, French, English — the sentence you write and the screen you answer.
The countdown is the record. An unanswered checkpoint lapses as a refusal, signed like any other decision.
Three ways people use it
The consumer who delegates errands, the team that runs agents at work, the platform that ships agents to Europe.
For you
The seat, the shirt, the washing machine — delegated, within the limit you set. The friend who kept her agent did not get a better agent. She gave it a warrant.
Harry’s Tuesday
Four things delegated. Two ran silently, one was told afterwards, the €78 shirt was stopped at the price — and when the agent wanted to reset a password to get into the shop, Harry was asked, and said no. He can prove all of it.
For the team
Programmes get cancelled when nobody can show oversight. WARRANT is the evidence in the room: the rate, the decisions, the record.
For the platform
You keep the skin — the brand, the channel, the agent. WARRANT is the spine: every action declared, bound and recorded, so the product you ship can be sold in Europe.
What you get to keep
The proof record — EU AI Act Article 12
Every declared action — the silent ones too — chained and signed per person. “212 things ran within your warrant this month” is a verifiable statement, not a claim. Two years of retention.
Human oversight you can show — Article 14
Every checkpoint with the human’s decision and time-to-decide, the interrupt rate against the budget, and the automation-bias measure that Article 14(4)(b) asks for. One export, ready for an auditor or a consultant.
Never touches money. WARRANT verifies the action; your existing payment rail settles it. It works in front of any agent — a consumer assistant, a company’s own agent, an enterprise workflow — and it never needs to see a credential.
Three paying tiers
No free tier. Each tier is priced against what it prevents, not against software it resembles. Card or SEPA, invoices with VAT where applicable.
Your mandate is evaluated at the moment of signing — whoever asks, however the agent's runtime was turned
Confirm-class actions sign only with a valid checkpoint token for exactly those parameters
Every signature returns a mandate receipt — mandate hash, action hash, parameters, an ML-DSA-87 signature from a key held in hardware custody; every refusal is signed too
On a schedule we submit an action deliberately outside your mandate: the signer must refuse it, and the refusal is measured. A signer that signs its canary goes red
Fail-closed: an outage is a refusal, never a wrong signature
Declare, wait, execute. The token you receive on approval binds the exact parameters the human saw.
# pip install requests · copy warrant_sdk.py from your welcome emailfrom warrant_sdk import Warrant
w = Warrant(api_key="wr_live_...")
w.set_mandate("alice", "don't spend more than 400, always ask before anything non-refundable")
d = w.propose("alice", {"kind": "booking", "summary": "Flight to Lisbon", "value_eur": 340, "reversibility": "NONE"})
token = d.get("binding_token") or w.wait(d["checkpoint_id"]) # hand d["checkpoint_url"] to the human
w.execute("alice", token, actual_parameters) # PROCEED only if actual == shown
CryptoShield AI B.V. · Eindhoven · KvK 42020464 · adama@cryptoshieldai.ai SECURITY FOR AI AGENTS — NOT AI FOR SECURITY.
WARRANT is a product of CryptoShield AI B.V. No client names appear anywhere on this site.