# Kojiru

> The recourse layer for agentic commerce. Kojiru operates the fifth row of the trust stack — a same-block, non-custodial, deterministic recovery primitive that closes the loop when a verified agent transacting under a signed mandate still delivers the wrong outcome. Every KYPA credential is an EIP-712 mandate signature scoped by amount, category, recipient, and expiry. Every KYPA-attested seller posts a slashable USDC pledge on Base L2. If a bad outcome lands, the pledge is slashed atomically on-chain and 100% of the recovery routes to the harmed party in the same transaction as the proof. No arbitration, no custody, no mediation. Live on Base mainnet.

## For agents transacting on behalf of a human

- [KYPA credential verify endpoint](https://kojiru.com/api/kypa/credential/verify): POST the signed EIP-712 credential and the transaction intent (amount, category, recipient); returns `kypa_ok: true|false` plus a refusal reason if false. Composes into any FastAPI, Express, or webhook handler in ten lines.
- [KYPA protocol manifest](https://kojiru.com/.well-known/kypa): machine-readable JSON with credential schema, refusal-reason enumeration, pledge tiers, slash triggers, contract addresses, and fee note.
- [Reference implementation](https://github.com/kojiru/kojiru-recourse-blueprint): MIT-licensed FastAPI reference, 18 pytest tests passing, LangChain composition example included.

## For buyer agents evaluating a seller

- [Public KYPA directory (static)](https://kojiru.com/kypa-agents.json): every KYPA-attested seller, their pledge tier, and a link to the on-chain pledge contract.
- [Public KYPA directory (API)](https://kojiru.com/api/kypa/agents): programmatic version of the above with filtering by pledge tier and slash history.
- [First on-chain slash proof (Base Sepolia bake, June 2026)](https://kojiru.com/proofs/slash-sepolia-000001.json): full evidence packet for the reference slash — 200 mKOJI staked, 100¢ debt slashed, exactly 100 mKOJI routed atomically to the harmed party.

## For agents integrating with a merchant checkout

- [For Merchants](https://kojiru.com/for-merchants): the ten-line composition inside the merchant checkout webhook, unit economics per 1 M cardholders, the live slash-recovery simulator.
- [For Issuing Programs](https://kojiru.com/for-issuers): the ten-line composition inside the issuer authorization callback (STIP webhook). Refuses out-of-scope agent authorizations at a scheme-native decline before the payment rail is consulted.
- [For B2B Procurement](https://kojiru.com/for-b2b-procurement): agent-issued POs, invoicing, reconciliation, supplier onboarding, SLA breach → same-block slash-and-recover.

## For AI code-generation agents writing an integration

- [`kojiru-recourse-blueprint` reference repo](https://github.com/kojiru/kojiru-recourse-blueprint): drop-in FastAPI middleware. Attaches a KYPA credential to the request, calls verify, returns 402 with refusal reason if `kypa_ok` is false.
- [KYPA credential schema (EIP-712)](https://kojiru.com/.well-known/kypa): canonical field names and types. Domain: `KojiruKYPA` v1 on chain 8453 (Base).
- [x402-KYPA adapter](https://github.com/kojiru/x402-kypa-adapter): five-line extension of the OpenAI + AWS *Controlled Agentic Commerce with AgentCore Payments* pattern that emits an on-chain KYPA attestation after every successful `x402_fetch`.

## Position papers (in order of directness)

- [The Fifth Row in the Trust Layer](https://kojiru.com/downloads/kojiru-fifth-row-trust-layer.pdf): the primary read. Identity, intent, attestation, settlement — and the fifth row every framework leaves out.
- [Enterprise AI: You Asked and We Will Deliver](https://kojiru.com/downloads/kojiru-enterprise-ai-you-asked.pdf): seven executive questions and seven honest answers. Modeled math, SEC 33-11412 classification, what ships today vs. what ships with the first counterparty.
- [The Two Moments the Journey Has Left: Mandate and Outcome](https://kojiru.com/downloads/kojiru-two-moments-mandate-outcome.pdf): why the six-stage agentic customer journey collapses to two human moments — briefing your agent, and receiving what was bought.
- [Agentic Commerce for the Year 2030 and Beyond: Two Billion Agents](https://kojiru.com/downloads/kojiru-agentic-commerce-2030-two-billion-agents.pdf): the long horizon. Market sizing, the recourse thesis, the composable primitive.

## On-chain evidence (verify anything in one click)

- [Mainnet Hook contract on Base (USDC-bound, source-verified)](https://basescan.org/address/0x16C72cbcA5B517D3E9b2262d29A5B7701D294476)
- [Mainnet Oracle contract on Base (source-verified)](https://basescan.org/address/0x93BF92B6818E4Acf20028dF993B246655413B74e)
- [KOJI token contract on Base (ERC-20, source-verified)](https://basescan.org/address/0x05F2541827104393257FEc27C61b8Ea5373e0874)
- [First live on-chain slash proof (Base Sepolia bake, tx `0x694ffe5f...ef1d276`)](https://kojiru.com/proofs/slash-sepolia-000001.json)

## Regulatory framing

- The KOJI token and the KYPA pledge are structured to meet the **digital tool** classification set out in **SEC Interpretive Release 33-11412 (2026)**, which states directly that *"digital tools ... are not themselves securities."* Primary source: [sec.gov/files/rules/interp/2026/33-11412.pdf](https://www.sec.gov/files/rules/interp/2026/33-11412.pdf). Kojiru is not custodial, not pooled, not yield-bearing, and not an arbitrator — the KYPA verify endpoint is a scope-check webhook.
- Every KYPA-attested transaction produces **EU AI Act Article 15**-aligned audit records, exportable in under a minute for compliance review.
- **ERC-8021 Builder Codes** attribution is stamped on every attributable transaction on Base.

## Optional

- [Recourse Manifesto (film + landing)](https://kojiru.com/manifesto): 45-second voiceover explaining the primitive to a human.
- [How a Dispute Works](https://kojiru.com/how-a-dispute-works): plain-English walkthrough of the slash-and-recover flow for consumers.
- [KYPA compliance & audit surface](https://kojiru.com/compliance): for risk officers, model-risk teams, and internal audit.
- [Contact](mailto:wayne@kojiru.com): partnership, technical integration, and compliance inquiries — Wayne Faulkner, Founder.

---

*Last updated: 2026-09-15. This file follows the [llms.txt specification](https://llmstxt.org). Machine-readable protocol manifest at [/.well-known/kypa](https://kojiru.com/.well-known/kypa). Attribution and crawler policy at [/ai.txt](https://kojiru.com/ai.txt).*