Mandates
What a person authorised a machine to do — scope, ceiling, expiry, constraints — and the calls that issue, check, consume, read and revoke it.
A mandate is issued from a live capture, is immutable once written, and is the only reason an agent may act. Every mandate call sits under https://api.sidaxis.com/functions/v1/ and carries x-sidaxis-api-key, x-sidaxis-timestamp and x-sidaxis-nonce.
| Call | Page | What it does |
|---|---|---|
GET mandate-scopes | scopes | The eight canonical scopes with human labels |
POST mandate-issue | issue | Issue a mandate from a live capture |
POST mandate-check | check | Advisory: would this action fit? Nothing moves |
POST mandate-consume | consume | Authoritative: the only call that moves the ceiling |
GET mandate-get | get | One mandate with its statement, or a list by status |
POST mandate-revoke | revoke | Immediate, terminal revocation |
Sidaxis is the human authorisation layer. It never moves money, holds funds or settles. The machine-readable contract is openapi.yaml.