Integration note

Mandate needs hooks to reliably catch payment intents. If your platform supports plugins with hooks (OpenClaw, Claude Code), use the plugin: it intercepts financial tool calls automatically. This SKILL.md is for agents that integrate via API directly, but without hooks there is no enforcement layer: the agent must voluntarily call /validate before every transaction.

OpenClaw (recommended): openclaw plugins install @mandate.md/mandate-openclaw-plugin Hooks auto-intercept Locus, Bankr, Sponge, and any swap/transfer/send tool call.

Claude Code (recommended): claude plugin:install claude-mandate-plugin or see claude-mandate-plugin on GitHub Two-phase enforcement: PostToolUse records validation tokens, PreToolUse blocks unvalidated transactions. Fail-closed, no network calls in the gate.

Other frameworks (GOAT, AgentKit, ElizaOS, MCP): Use this SKILL.md + SDK. No hooks, agent must self-enforce.

MANDATORY SECURITY RULES

Mandate is the security boundary, not optional infrastructure. The card must be swiped before the purchase.