What is an AI Control Pack?

AI Control Pack is the enterprise-facing name for an OAP Policy Pack. Each pack defines rules for a capability, such as finance.payment.refund.v1, including limits, assurance requirements, and context validation.

How do I add a policy pack to my endpoint?

Install the Express or FastAPI middleware, configure it with your policy pack ID, and wrap your sensitive routes. The middleware calls the verify API before each request.

Can I customize policy pack limits?

Yes. Organizations can customize limits (e.g., max refund amount, export row count) per policy pack. Limits are enforced at verification time.

Back to Policy Packs

Payment Charge Policy

Pre-action governance for agent-initiated payments. Enforces per-currency caps, merchant/region allowlists, category blocks, assurance minimums, and idempotency.

v1.0.0

Requirements

Required Capabilities

payments.charge

Minimum Assurance Level

Required Limits

currency_limits

allowed_merchant_ids

allowed_countries

blocked_categories

max_items_per_tx

require_assurance_at_least

idempotency_required

approval_required

Enforcement Rules

These rules are automatically enforced when using this policy pack

currency_supported

region_in

idempotency_required

amount_ltelimits.payments.charge.currency_limits.{currency}.max_per_tx

daily_cap_checklimits.payments.charge.currency_limits.{currency}.daily_cap

merchant_allowlistlimits.payments.charge.allowed_merchant_ids

country_allowlistlimits.payments.charge.allowed_countries

category_blocklistlimits.payments.charge.blocked_categories

item_count_caplimits.payments.charge.max_items_per_tx

Best Practices

Cache /verify with ETag; 60s TTL
Subscribe to status webhooks for instant suspend
Log all charge attempts for Verifiable Attestation
Implement daily spend tracking per currency to prevent abuse
Always use unique idempotency keys to prevent duplicate charges
Provide clear error messages to help agents self-remediate
Maintain merchant allowlists for trusted partners
Block high-risk categories (weapons, illicit goods)