The Toll

A price may enter the gate as a whisper. Only bounded Will may let it leave as consequence.

Toll is LychD's optional economics Extension Domain for priced remote labor. It is Designed: no payment machinery or safe HTTP 402 handler ships. State of Work owns delivery; ADR 41 owns the law.

An HTTP 402, invoice, or quote is an untrusted proposal. It carries no authority to sign, settle, retry, identify a caller, grant access, or enlarge a budget. Toll admits no global system-wallet middleware that pays the challenge and retries. Neither Agent nor Dispatcher receives wallet or signing authority.

One paid request

A destination-pinned connector produces a candidate request and quote. Dispatcher considers an admitted price only after capability, privacy, policy, and resource eligibility. Two unequal planes then carry the same request.

For Intercom, casting work and teaching a missing Spell are different purchased resources. Each needs its own exact quote, content identity, budget reservation, consent or standing authority, idempotency key, delivery condition, and reconciliation. Payment for one never buys or retries the other.

The Counting House parses one supported, versioned quote in integer units, accounts its cost, reserves worst-case exposure, and reconciles receipts. It holds no spend key. The reservation binds an authenticated Principal and budget owner; trusted merchant or service; exact method and canonical destination; request-body digest and purchased resource; asset and network; maximum amount including fees; expiry; redirect policy; and idempotency key. Unknown versions, schemes, networks, merchants, destinations, amounts, fee bounds, changed terms, or expired authority fail closed.

Policy rejects the request, applies one explicitly bounded low-risk standing authority, or parks the Run for live consent to the exact terms. Significant or novel spend requires HitL. Approval covers the stated maximum, never a later challenge. The Magus administers policy without exemption from signer or key safety.

The Irreversible Gate has no model or general tool surface. It revalidates the pinned authorization, live reservation, and caps; atomically consumes the reservation; signs and submits the one named settlement at most once; and records the external-effect identity. After independently authorized settlement, the original connector may make at most one proof-bearing replay to the same destination. That replay cannot initiate another payment. Reconciliation then joins settlement to useful delivery.

What settlement cannot buy

Tithe accounts currency-neutral tokens, generated media, concurrency, queue weight, and hardware time against a stable Principal or service grant, including when every payment adapter is disabled. Money or a receipt cannot mint or widen a Sigil or Ward authority, expose memory or tools, bypass consent, or displace protected local work. A purchased grant exists only at the intersection of settlement evidence, Ward policy, capability policy, and available resources. Currency-free Legion work still needs quotas, reservations, attribution, and evidence.

Settlement cannot authenticate a peer, make an unknown Spell compatible, admit a teaching bundle, publish an implementation, activate a catalogue generation, or resume the refused Invocation. It may satisfy only the economic condition of an otherwise eligible act.

Payment and delivery are not atomic. Settlement may yield no useful artifact; apparent success may be false or unusable. Refund, credit, dispute, expiry, paid-but-undelivered, and ambiguous outcomes remain explicit durable states.

What survives uncertainty and restore

Quote, reservation, authorization, submission, settlement, delivery, refund, expiry, and uncertainty form a durable idempotent chain. An unknown settlement triggers investigation and reconciliation, never another signature. Local rollback or a database restore cannot rewind money; spending stays closed until external state is reconciled.

Oculus receives redacted observations, never ledger authority. Keys, signatures, bearer proofs, preimages, invoices, and unrestricted wallet credentials stay outside prompts, Codex values, logs, traces, and artifacts.

Protocols and settlement rails are adapters around this law, never rival ledgers. The first implementation must pin one exact x402 profile and conformance corpus; ADR 41 owns every later adapter decision.