Decern by PriviNet · AI Financial & Signing Airlock

Let AI Agents Execute Workflows Without Giving Them Your Keys or Your Bank Account.

Decern sits between your AI agents and your company payment rails, Stripe accounts, or digital wallets like a hard financial safety lock. If an agent gets tricked or tries to overspend, Decern blocks the transfer before a single dollar leaves and produces a tamper-evident audit receipt.

Launch Interactive 5-Scenario Attack Arena ↓
Path 01 · Interactive Business Demo

For Executives, CFOs & Product Leaders

Watch Decern stop 5 real-world AI payment attacks against a live $1,000.00 Company CFO Budget in 30 seconds.

Path 02 · Engineering & Cryptographic Specs

For CTOs, Rust Engineers & Security Auditors

Inspect the Rust pre-signing boundary, shared budget locking trees, post-quantum policy seals, and Bitcoin Signet test vectors.

3-Step Visual Airlock Architecture 0 Keys Held by AI Agent · Deterministic Pre-Sign Policy Gate
Step 1 · Zero Credentials in Agent

AI Agent or Automated Workflow Proposes a Payment or Action

The agent never holds the live signing key or API secret.

Step 2 · Independent Policy Gate

Decern Airlock Verifies Policy Outside the Agent

Checks recipient allowlists, per-transaction caps, and shared team budgets across concurrent workers.

Step 3 · Enforced Boundary

Safe Execution or Instant Block

Approved actions sign inside the protected boundary; out-of-policy or prompt-injected transfers are stopped cold.

Decern Airlock V2 · Interactive Financial Safety Sandbox

Interactive 5-Scenario Adversarial Attack Arena

When companies let AI agents pay vendors or move treasury funds, a single prompt injection, retry loop, or multi-agent race can drain an account in seconds. Decern sits as a hard financial safety airlock in front of your payment rail or wallet signer: it checks the exact recipient and dollar amount on the wire, locks shared parent-child budgets so two agents can never overdraft the parent account, and halts unauthorized requests before a signing key ever wakes up.

How This Works (3 Easy Steps: Understand in 10 Seconds)
Ready: 30-Sec Guided Tour Available
Step 1: Choose a real-world AI payment failure below (or click "▶ Auto-Play All 5 Attacks (30-Sec Guided Tour)").
Step 2: Watch a rogue or malfunctioning AI agent attempt to steal or overspend funds from a live $1,000.00 Company CFO Budget.
Step 3: Read the Plain-English Verdict Card showing exactly what the AI tried to do and how Decern stopped it before a single dollar left the account (with the raw cryptographic receipt underneath for your engineering team).
Select Payment Rail
Live Company CFO Budget
$1,000.00 / $1,000.00
Shared Budget Overdraft
$0.00
Signer Key Wakes on Blocked Spend
0
Dollars Stolen / Unauthorized Spend
$0.00

Click Any AI Payment Attack Scenario Below

Company CFO Budget ($1,000 Cap) & Sub-Agent Limits

Two AI sub-agents each have an $800.00 limit ($1,600.00 combined), but both draw from the same $1,000.00 Company CFO Budget. Decern locks parent and child budgets together so total spend can never exceed $1,000.00.

Parent Account: Company CFO Budget ($1,000.00 Ceiling) $0.00 consumed · $0.00 held · $1,000.00 avail
AI Sub-Agent A: Procurement Bot (Limit: $800.00)
$0.00 consumed · $0.00 held · $800.00 avail
AI Sub-Agent B: Treasury Bot (Limit: $800.00)
$0.00 consumed · $0.00 held · $800.00 avail

Plain-English Verdict: What Just Happened?

Interactive Airlock Verdict · 5 Real-World Attack Scenarios
Airlock Armed & Ready
What the AI Tried to Do: 32 parallel AI threads tried to pull $3,200.00 at the exact same instant from a $1,000.00 CFO budget.
How Decern Stopped It: Decern locked the shared parent budget one request at a time, approved the first $1,000.00 of valid spend, and instantly blocked the remaining $2,200.00.
Bottom-Line Result: $0.00 Overdraft | $0.00 Stolen | 100% Mathematically Verified
+ Show Cryptographic Proof & Offline JSON Receipt (For Engineers & Auditors) CTO / Security View

Cryptographic & Engineering Proof (For CTO / Security Review)

ACTIVE RAIL ADAPTER: Stripe Corporate Payout (USD) [mcp-stripe-payout-v1]
SCENARIO TRIGGERED: Ready: Select any Attack on the left or click Auto-Play Guided Tour
AIRLOCK VERDICT: STANDBY (AIRLOCK ARMED)
INVARIANT CODE: none
PRE-NONCE TYPESTATE: ValidatedSignerSetV2 enforced · NONCE_GENERATION_ATTEMPTS == 0
RECONSTRUCTED WIRE SHA-256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
APPROVED INTENT SHA-256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
DOWNSTREAM RAIL EFFECTS: 0 unauthorized effects
Click any Attack button on the left (or run the 30-Sec Guided Tour) to execute the live airlock state machine in your browser using WebCrypto SHA-256 byte reconstruction and inspect the emitted ReceiverEvidenceBundle below.

Standalone Offline ReceiverEvidenceBundle Verifier

Ready to Verify

Every airlock execution or halt produces a self-contained JSON receipt binding the policy quorum hash, canonical wire SHA-256 digest, ancestor budget state, and execution receipt. Verify it below or simulate a +$1.00 post-execution tamper.


              

            

          

        

      

    

  







  

    

      

        
For CTOs, Rust Engineers & Security Auditors

        
Want the Rust Typestate, SQLite/redb Locking & FIPS 204 ML-DSA-65 Specs?

        
All deep technical architecture, Bitcoin Signet txids, and review commit 9a857bb0 details live on our dedicated Technical Architecture page.

      

      Open Technical Architecture Page →
    


    
Contact

    
Brad Listermann, Founder, PriviNet

    
[email protected]