1. Tell the agent your rules
Plain English. A model drafts structured rules; code checks every number against what you typed and asks about anything unclear. Nothing is active until you press Activate.
2. Approve today's PayPal budget
One PayPal approval covers the day. Countersign creates an order with intent AUTHORIZE; each purchase that passes the gate captures only its own amount (final_capture: false). Unused budget is released with a void.
3. Send the agent shopping
The agent searches and picks. The gate re-reads the listing itself and checks price, currency, caps, category, seller, hours, delivery, returns and suspicious listing text. Allowed purchases are paid at once; anything unclear waits for you.
4. Orders, tracking and claims
Every order is tied to its PayPal capture and tracking number. If something goes wrong, the copilot builds the case from those records and drafts the claim; you approve the exact text before anything is filed.
5. Merchant desk
The same engine from the seller's side: PayPal disputes, matched to orders, ranked by deadline, with a recommended response and a draft. Submitting calls the Disputes API.
Optional: split a shared purchase
Code splits to the cent (largest remainder). PayPal has no public person-to-person request API, so each share is requested with a PayPal invoice.
Audit log
Every draft, verdict, approval and PayPal call, hash-chained so an edited entry breaks the chain.