1. Evaluate the fixture
Select a registered fictional supplier-change scenario. Existing ATG controls evaluate agent/delegation evidence, exact supplier and account binding, verification fixtures, separation of duties and approval conditions.
Mission 05 · source-only local evaluation
Review one exact supplier bank change.
PayeeShield connects a fictional supplier-maintenance screen to ATG's existing supplier-change evaluation and signed exact-action controls. Inspect how approval is bound to one request and the current synthetic destination version before a local simulated change.
Synthetic demonstration only. Fictional data, public fixture signing keys, a fixed clock and volatile process-local state. No live bank verification, Confirmation of Payee, sanctions screening, payments, ERP writes or real human authentication. Not production ready.
A supplier-maintenance control example
From proposed change to one-use authority.
The amount is related-invoice context, not permission to pay. ATG checks the supplied fixtures; it does not establish bank-account ownership or whether a business decision is correct.
2. Bind one exact request
A permitted fixture receives a signed GatePass bound to the complete request and synthetic business state. REVIEW and BLOCK provide no executable authority. Changing an input discards the browser approval handle.
3. Inspect the outcome
The server independently checks request binding and destination version, consumes one-use authority and rechecks before its simulated commit. The fictional ending changes from 1846 to 7319; inspect the resulting JSON.
Try the refusal paths
Approval cannot authorise a different change.
- Changed supplier, account ending, amount or scenario: the approved request no longer matches.
- Stale destination state: a version edit after approval prevents the old authority from writing.
- Revoked or expired authority: execution is refused without a destination record.
- Replay: a consumed approval cannot execute a second change.
- REVIEW or BLOCK: no execution handle is returned.
Expiry is demonstrated against the fixed fixture clock. Revocation and one-use state belong to this single demo process, not an operational identity or banking system.
UNKNOWN means stop and inspect.
“Commit then lose acknowledgement” records an uncertain result and refuses automatic retry. The separate reconciliation handle survives form edits and invalid evaluations.
Explicit reconciliation checks the same process's synthetic record against the approved request. This is not independent destination evidence or durable recovery. A browser reload can lose its handles; restarting the server discards its fictional state.
All tabs share one process-local destination and approval map. Same-host, same-user code is not isolated by the loopback token. Never restart or reset real held state as a recovery procedure.
Source checkout · Node.js 20+
Run from the repository root.
Obtain the ATG source repository in a fresh directory. Use Node.js 20 or newer; Node 24 is recommended for the repository's wider shared-worker evaluation tools. The PayeeShield demo was checked on actual Windows Node 20 and 24.
After cloning, the directory containing package.json is the repository root. Keep the terminal running while using the page. Use registered fictional fixtures only; do not enter customer data or production credentials.
This GitHub Pages page is a static guide. GitHub Pages does not run the Node server. Opening the prototype HTML directly does not start the ATG adapter.
git clone https://github.com/Gareth1953/agent-trust-gate.git atg-payeeshield-evaluation
cd atg-payeeshield-evaluation
node --version
npm ci --ignore-scripts
npm run demo:payeeshieldOpen http://127.0.0.1:8795 on the same computer. Stop the local server with Ctrl+C. Restarting starts a new fictional run; it is not recovery.
Windows review and limitations · Original implementation evidence
Two distinct evaluation routes
The source demo is separate from local.7.
PayeeShield is an optional repository-source demo. It is not included in the published local.7 plugin. The local.7 archive, its checksum, historical downloads and existing recorded results remain unchanged.
Compare the standalone ATG plugin · Inspect the recorded ATG Challenge
Before any real integration
This screen supplies no live verification source, destination credentials, real human approval, durable recovery, multi-worker coordination or independent evidence. A separately scoped adapter and review would be required. It is not a hosted API, certification, fraud-protection service or payment product.
For evaluation enquiries, email gareth@agenttrustgate.com with a fictional or sanitised scenario. An enquiry makes no service, price or delivery commitment.