Whether your support team is 30 human reps, a hybrid of humans and AI, or fully automated, Axiru governs financial decisions the same way. You don't need to change your stack. You add an enforcement layer beneath it.
See what's already slipping through, before you change anything. Shadow mode replays your historical Stripe activity through Axiru's policy engine in read-only mode. Human decisions, AI agent decisions, all evaluated against a real policy baseline, before any enforcement activates.
Modeled before any live enforcement is activated.
Quantifies operational cost next to savings impact.
Connect Stripe read-only and review the last 90 days before any live changes.
Your policy. Enforced on every request. From every source. Live enforcement means every refund, whether submitted by a human rep under pressure, an AI agent responding to a manipulated prompt, or an automated workflow running overnight, passes through your policy before the Stripe API executes. The policy doesn't negotiate. It evaluates.
Connect Stripe read-only and review the last 90 days before any live changes.
Routine decisions stay fast. Edge cases go to the right person. Approval requirements are triggered by your policy, not by a rep's uncertainty or an AI agent's confidence. If a decision needs a human, it gets a human. Neither a tired rep nor a 95%-confident AI can bypass the routing logic.
SLA 2h
SLA 30m
Ledger attached
Connect Stripe read-only and review the last 90 days before any live changes.
Every decision. Permanent. Replayable. Defensible. The decision ledger captures every event in the lifecycle, from request intake through policy evaluation, approval routing, and execution. Sealed at the moment of decision. Immutable. Attached to the policy version that governed it. Holds for human decisions and provides legal-grade evidence for AI agent decisions.
Refund request ingested with actor, amount, region, and reason context.
Deterministic ruleset evaluated against refund amount and customer tenure.
Approval packet issued with recommendation, context, and replay link.
Finance manager approved with note and evidence bundle.
Outcome posted to execution layer and sealed into the decision timeline.
Connect Stripe read-only and review the last 90 days before any live changes.
Refunds are the canonical, fully governed flow. Other outbound action types are at varying tiers of coverage. We publish the matrix instead of waving generic 'agent governance' marketing at you, so you can self-select if your use case is payout-heavy or credit-heavy.
| Action | Examples | Tier |
|---|---|---|
| Refunds (Stripe) | stripe.refund.create | GA · Webhook live |
| Refunds (Square) | square.refund.create | Planned |
| Partial refunds | stripe.refund.create with amount | GA · Webhook live |
| Refund failures | stripe.refund.failed, always escalates with failure reason | GA · Webhook live |
| Goodwill credit | customer.balance_transaction (negative) and merchant-issued credits | GA · Webhook live |
| Discount / comp | retroactive coupon reducing AR | Partial |
| Payouts | stripe.payout.create with per-category thresholds and approval routing | GA · Webhook live |
| Payout failures | stripe.payout.failed / .canceled / .reconciliation_completed lifecycle | GA · Webhook live |
| Transfers | stripe.transfer.create / .reversed across Connect with reconciliation flagging | GA · Webhook live |
| Disputes | charge.dispute.created/updated/closed/funds_withdrawn/funds_reinstated with evidence-deadline routing | GA · Webhook live |
| Application fee refunds | application_fee.refunded / .refund.updated for Connect platform fees | GA · Webhook live |
| Charge reversal / void | stripe.charge.capture reversed pre-settlement | Plumbing only |
| Chargeback acceptance | merchant elects to lose dispute (charge.dispute.closed with status=lost where the merchant did not submit evidence) | GA · Webhook live |
| Write-off | invoice.marked_uncollectible with age + dunning-attempt escalation | GA · Webhook live |
| Subscription cancel + proration | customer.subscription.deleted with future cash inflow forfeited, mid-cycle proration credits | GA · Webhook live |
| Free trial extension | customer.subscription.updated with previous_attributes.trial_end (deferralDays × per-cycle MRR pro-rated); reinstated trials, >30-day deferrals, and repeat extensions always escalate | GA · Webhook live |
| Promo credit issuance | customer.balance_funded with axiru_credit_intent=promo metadata; untagged campaigns escalate | GA · Webhook live |
| x402 agent payments | Signed Offer/Receipt verification via @axiru/x402-receipt-verifier (JWS did:web + EIP-712 did:pkh); POST /api/v1/x402/receipts persists cryptographic evidence chain to X402EvidenceRecord with payer + signer DID + txHash binding | GA · API live |
GA = production-quality, fully governed end-to-end. Webhook live = Stripe events flow through the typed dispatcher in production with persistent dedupe and structured failure paths. Partial = the policy engine evaluates it, no first-class dashboard yet. Plumbing only = the AGT extension routes it to Axiru, native templates and dashboard surfaces are still on the runway. Not covered = no path today.
Coverage tiers above are not static. Axiru's Rail Change Monitor diffs an action-surface snapshot against the previous capture and emits structured change events when a provider adds a required parameter, removes an action, or bumps a capability version. The diff engine, action-signature builder, and severity classifier are live; rail-specific snapshot adapters and the auto-freeze → on-call page-out hooks ship next.
@intentledger/agent-core/rail-monitorShadow mode shows you what a governed system would have decided on your last 90 days of Stripe activity. No enforcement. No changes to your existing stack. Just a clear view of what's been happening.
Start in shadow mode first. Move to live enforcement later.
We use cookies for analytics and marketing measurement. You can reject non-essential cookies at any time.