Make any agent payment cancellable.
An agent is allowed to act alone exactly as far as its action can be undone. A payment held in escrow is reversible, so the agent does not need to ask. An irreversible one is not, so it always does. Send a payment below and take it back.
Start a sandbox treasury
You get your own treasury, funded from a devnet faucet, isolated from every other visitor and from the live one. Real policy engine, real escrow contract, real cancellation — sandbox money.
Balance, reserves, ceilings, allowlists, rate limits and anomaly checks — evaluated server-side, never by the model.
A recoverable payment is held in a real vault contract. The window is enforced on-chain, and so is the recall.
Each decision and state change lands in an append-only ledger, with the transaction hash that proves it.
This page runs the identical engine the live product uses. The live treasury executes on Arc testnet with transactions you can look up; this sandbox runs on an isolated in-process devnet so that anonymous traffic can never touch real funds. Elpis never moves production money, and refusal is the default for irreversible actions.