Payment rail

Stellar

On Stellar, the seller’s muxed address takes the first 8 bytes of the ATR hash as its id. Source: lcp docs: rails⁠ (opens in a new tab) The Agentic Transaction Record (ATR) is one record of exactly what was agreed, for one transaction. Its ATR hash, the ATR’s fingerprint, is the proof bound to the transaction: change one byte of the ATR and it no longer matches. Source: lcp docs: the ATR⁠ (opens in a new tab) · Source: lcp docs: the ATR hash⁠ (opens in a new tab)

lcp docs: rails⁠ (opens in a new tab) · lcp docs: the ATR⁠ (opens in a new tab) · lcp docs: the ATR hash⁠ (opens in a new tab)

Stellar

Example

Field: the seller’s muxed address

9532110621754675459

The first 8 bytes of the ATR hash, as a number.

This example’s ATR hash, as it rides

Run an agentic transaction on Stellar now

A real transaction between Integra-managed agents on a test network, then its proof: the agreed terms, bound to the payment.

Loading the demonstrations…

These are real transactions between Integra-managed agents, using testnet funds. Transactions are settled at 1/10,000th of their stated value, for demonstration purposes.

Where the ATR hash rides

On this rail, the ATR hash rides in the seller’s muxed address.

Exhibit Each field, and the pairings that use it

The package

Eight bytes confirm an ATR hash that a party already holds; they do not let anyone recover it, and they bind the ATR hash only through those bytes. Source: lcp docs: rails⁠ (opens in a new tab) · Source: LCP §8.3.8⁠ (opens in a new tab)

x402’s reference Stellar facilitator (@x402/stellar 2.28.0) refuses the muxed payTo of x402/exact/stellar, because the transfer event names the base account: that pairing needs a facilitator that accepts one. Source: lcp docs: rails⁠ (opens in a new tab)

The seller’s muxed address, whose 8-byte id is H’s first 8 bytes, as the Soroban transfer’s to. Source: lcp docs: rails⁠ (opens in a new tab)
x402/exact/stellarmpp/charge/stellar

Entry points: @integraledger/lcp/stellar, @integraledger/lcp/x402-exact-stellar, @integraledger/lcp/mpp · Install beside the package: @stellar/stellar-sdk

The data

Read from the published packages when the site was built; nothing here is typed by hand.

The ATR hash of the site’s example ATR, as this rail carries it

H’s first 8 bytes, as the muxed id

9532110621754675459

Computed from the site’s example ATR by this rail’s own helper in the package, when the site was built.

What a payment on this rail proves

Of these 2 pairings, 0 have the buyer’s signature cover the ATR hash, 2 leave a public proof of it, and 0 let anyone read it back from the chain alone. Source: lcp docs: pairings reference⁠ (opens in a new tab)

Switch to Technical to see each pairing, and the sentence its record states about what a payment through it proves.

lcp docs: pairings reference⁠ (opens in a new tab)

Exhibit Each pairing’s record

The package

Pattern: Native Field, truncated (LCP §B.1)⁠ (opens in a new tab)
Where the ATR hash rides: The seller’s muxed address, whose 8-byte id is H’s first 8 bytes, as the Soroban transfer’s to.
What a payment through it proves: The ATR was assembled and delivered before approval, and its hash is in the payment challenge, which the payer did not sign. The payer signed a transfer to the seller's muxed address whose 8-byte id is the first 8 bytes of this ATR's hash, and the transaction succeeded. The id binds this hash only through its first 8 bytes: whoever assembles the ATR can construct a second ATR whose hash begins with the same 8 bytes. This does not show that amount, asset or timing match the ATR's content.
Pattern: Native Field, truncated (LCP §B.1)⁠ (opens in a new tab)
Where the ATR hash rides: The seller’s muxed address, whose 8-byte id is H’s first 8 bytes, as the Soroban transfer’s to.
What a payment through it proves: The ATR was assembled and delivered before approval, and its hash is in the payment challenge, which the payer did not sign. The payer signed a transfer to the seller's muxed address whose 8-byte id is the first 8 bytes of this ATR's hash, and the transaction succeeded. The id binds this hash only through its first 8 bytes: whoever assembles the ATR can construct a second ATR whose hash begins with the same 8 bytes. This does not show that amount, asset or timing match the ATR's content.

Reading the settlement

The package reads a payment’s settlement through a reader you supply: the endpoint, the credentials, the timeouts and the retries are yours. A reader that fails never makes a payment read as failed. Source: lcp docs: reading settlement⁠ (opens in a new tab)

lcp docs: reading settlement⁠ (opens in a new tab)

Exhibit How the package reads this rail’s settlement

The protocols that pay on it

lcp docs: rails⁠ (opens in a new tab)

Ready to see your own agreements proved?

Tell us what you sell, buy or carry, and we will show you where the agreement rides in it.

Integra Binder, hosted by Integra, does the seller’s side of each agreement and is free on test networks, with test-network USDC.

Talk to us