Public proof sandbox preview

See how the governor will be pressure-tested.

After activation, your browser will hold the human key. An agent-shaped capability will be able to attempt fixed actions, but not approve itself, through the Cedar policy, reservation, ledger, AP2 emission, and verifier paths.

The interactive runtime remains disabled until its isolated network, dedicated database, cleanup limits, recovery path, and retained adversarial drills pass the production launch gate.

Choose the pressure test

Each input is fixed and bounded. Nothing you enter can become a domain, URL, email, or provider request.

Preparing a browser-held signing key…

HumanAfter activation, a non-extractable browser key will sign the mandate and gate decision.

AgentA short-lived random capability will be able to attempt a fixed action only.

SproutPadA sandbox-only issuer will sign fake-money AP2 and proof artifacts.

After activation, this will demonstrate implementation mechanics. It will not be real settlement, provider parity, uptime evidence, or independent certification.

Proof timeline

After activation, start a session and run a fixed scenario. Denials and safe failures are successful governed outcomes.

Human decision required

The agent stopped. Only the browser-held key can sign this exact request digest and one-time nonce.

Inspect raw signed artifact

No artifact yet.

Verify a downloaded proof offline

Available only after activation and after a proof has been emitted.

pnpm sandbox:verify -- \
  ./sbp_…-SANDBOX-FAKE-MONEY.json \
  https://sproutpad.ai/.well-known/sandbox-proof-jwks.json \
  https://sproutpad.ai/.well-known/sandbox-jwks.json