What Warrant is
Conditional-release payments for AI agents, on Rialo.
Warrant holds an agent's payment until the deliverable behind it is verified, then releases it, releases part of it, or sends it to a human.
POST /v1/warrants open one, funds move to held
POST /v1/warrants/:id/verify check the deliverable
→ released · partially_released · escalatedAn agent that can spend money is a liability until something checks what it bought. The usual answer is a spend cap, which limits the damage without improving the odds: a capped agent still pays for the wrong thing, just less of it.
Warrant inverts that. The payment is signed and parked, not sent. A verifier pulls the deliverable itself — not the agent's report of it — checks it against a spec both sides agreed to in advance, and only then does money move. A clean pass releases automatically. Anything else goes to a person, with the evidence attached.
The payee gets a receipt they can read without an account: what was checked, what came back, what was decided. The payer gets a record that a machine, not a promise, closed the loop.
What is real today
Read this before planning around it
Warrant is at v0.1 and parts of it are not built. Every page here says which parts, on the page where you would need to know. Nothing in these docs describes an endpoint that does not exist: the API reference is checked against the running API on every build, in both directions.
- The API, the clause engine and the eight verifier templates are built and tested.
- Trace anchoring on the Rialo testnet is live. See REX verification.
- Custody of held funds is a double-entry ledger in Postgres. The onchain escrow program is written and not deployed; Contracts says why.
- Verification runs in Warrant's own process today, with the request sealed to the network's confidential-compute key. Confidentiality is precise about what that does and does not give you.
Start here
Quickstart opens a warrant against a real endpoint in about five minutes. The warrant lifecycle is the one concept worth reading before you write any code.