Definition: xBPP (Execution Boundary Permission Protocol) is the open standard for governing autonomous AI agent payments. It provides a chain-agnostic governance layer that evaluates agent spending intent against declarative policies before transactions are executed.
xBPP is a stateless, payload-driven standard. It doesn't live on one chain, and it doesn't require a specific wallet. It works by bringing governance directly to the point of intent.
A standardized middleware layer between Agent and World
YOUR APPLICATION
Agent wants to pay $50 to 0xABC...
XBPP INTERPRETER
Action + Policy → Verdict
RESULT
ALLOW | BLOCK | ESCALATE
Step 1
Agent generates an action request
"Pay $50 USDC to 0xABC on Base"
Step 2
xBPP checks against active Policy
Constraints evaluated in real-time
ALLOW
Proceed with the payment
BLOCK
Stop; this violates policy
ESCALATE
Ask a human to approve
| Concept | What It Is | Example |
|---|---|---|
| Action | A proposed payment to evaluate | "Pay $50 USDC to 0xABC" |
| Policy | Rules defining what's allowed | "Max $100/tx, $1000/day" |
| Verdict | The evaluation result | ALLOW, BLOCK, or ESCALATE |
| State | Running totals and history | "$340 spent today" |
| Posture | Default risk tolerance | AGGRESSIVE, BALANCED, CAUTIOUS |
Trust builds over time - automatically
Cautious Posture
$10 limit, full human oversight
Aggressive Posture
$10k limit, autonomous execution
Graduate between postures as trust builds - without rewriting a single line of code.
Hard-coded if (amount > 100) inside the bot
External Policy file: max_single: 100
Redeploy the entire agent to change a limit
Update the Policy; agent obeys instantly
"Check the logs and hope"
Cryptographic Verdict attached to every transaction
Blame the developer
Audit the verdict - the Protocol enforced the Policy
An agent prepares an x402 transaction. This could be a purchase, a swap, or a subscription payment.
The transaction payload is passed through the xBPP engine. Policies are checked against current state and transaction parameters.
xBPP returns a signed verdict: ALLOW, BLOCK, or ESCALATE. Only 'ALLOW' produces the required signature for settlement.