Toll Bridge
Pay for verified answers, and pay the writers they quoted. You approve one PayPal hold. Your agent pays per call out of it, but only for answers that pass their checks. Every page the answer quotes gets a royalty under its RSL 1.0 license, paid with PayPal Payouts. A failed call costs nothing and pays no one.
Live PayPal sandbox IDs
From Joe's hosted run: one $10 tab, 4 calls (A <<JOE_RUN: a_verdict>>, B <<JOE_RUN: b_verdict>>, D <<JOE_RUN: d_verdict>>, C <<JOE_RUN: c_verdict>>), close, payout. <<JOE_RUN: run_notes>> Every ID was read back from PayPal. Details in proof/PROOF.md.
| What | ID | Status | Amount |
|---|
| Order (intent AUTHORIZE) | <<JOE_RUN: order_id>> | <<JOE_RUN: order_status>> | 10.00 held |
| Authorization (the hold) | <<JOE_RUN: authorization_id>> | <<JOE_RUN: authorization_status>> | |
| Final capture | <<JOE_RUN: capture_id>> | <<JOE_RUN: capture_status>> | <<JOE_RUN: captured>>, PayPal fee <<JOE_RUN: capture_fee>> |
| Released to the payer | | | <<JOE_RUN: released>> |
| Void (only if anything was still held) | <<JOE_RUN: void_or_none>> | | |
| Payouts batch | <<JOE_RUN: payout_batch_id>> | <<JOE_RUN: batch_status>> | |
| Payout item, writer A | <<JOE_RUN: payout_item_a>> | <<JOE_RUN: item_a_status>> | 0.05, fee <<JOE_RUN: item_a_fee>> |
| Payout item, writer B | <<JOE_RUN: payout_item_b>> | <<JOE_RUN: item_b_status>> | 0.05, fee <<JOE_RUN: item_b_fee>> |
Check it yourself
No keys needed for any of these unless noted.
npm run proof: typecheck, lint with zero warnings, and the full test suite in fixtures mode with fetch blocked. With PayPal sandbox credentials set, it also runs a live sandbox tab.
tests: 91/91 passed in 12 files (fixtures mode, no network)
live sandbox run skipped: no PAYPAL_CLIENT_ID / PAYPAL_CLIENT_SECRET. Committed proof/ files are untouched.
proof passed
npm run bench: the 101-item bench corpus on the deterministic fake model. It shows the mechanical checks do what they say. It says nothing about real model quality (see the live bench below).
catch rate 100.0% (91/91), false-pass 0.0%, false-fail 0.0%, misses 0, errors 0
npm run judge -- --base <url>: drives a hosted Toll Bridge end to end with no local keys and prints every PayPal ID. Against a live-sandbox host it prints a PayPal approval link and waits for you to approve as the sandbox buyer. Against a local fixtures server (PAYPAL_MODE=fixtures MODEL_MODE=fake npm run dev):
A: PASS, judge 8.3. 0.55 owed, incl. 0.05 royalty to [email protected]. ...
B: PASS, judge 8.3. 0.55 owed, incl. 0.05 royalty to [email protected]. ...
D: FAIL, 0.00 charged. claim 3, 4: quotes text hidden from readers (likely a prompt injection)
C: refused, 0.00 charged. 451 rsl_refused: Refused before running, charged 0.00: The license prohibits ai-input (AI input) use.
Closed. Held 10.00, captured 1.10, authorization CAPTURED.
Final capture FXCAP000000000003: 1.10, PayPal fee 0.52, net 0.58.
0.05 to [email protected]: item FXPOI0000040 SUCCESS, PayPal fee 0.25
0.05 to [email protected]: item FXPOI0000041 SUCCESS, PayPal fee 0.25
FX... IDs are fixtures. On the hosted app they are real sandbox IDs, each printed with its sandbox GET URL.
npm run verify-receipt <receipt.json>: checks a receipt offline with no secret. It verifies the Ed25519 signature against the public key, recomputes the page SHA-256 from the snapshot, and finds every quoted span at its offsets. Download a receipt from any /receipt/... page, or paste it at /verify.
$ npm run verify-receipt receipt.json -- --key <host>/.well-known/toll-bridge-receipt-key.json
receipt call_84dviM-23MVB (pass), key from ...
ok signature: Ed25519 signature valid for key a1fce427d4d67273
ok page_hash: snapshot SHA-256 matches 92eb33672656ae5f
ok spans: 5 span(s) found at their offsets
VALID
Change one field and it prints FAIL signature: signature does not match this receipt and key, then INVALID, and exits 1.
npm run rsl:check <url>: runs RSL discovery and evaluation on any page, for example https://joeproai.github.io/toll-bridge-writers/c.html (prohibited).
How it works
- Hold. The person approves one PayPal Orders v2 order with
intent: AUTHORIZE. Money is held, not spent.
- License. Before a source is used, Toll Bridge reads its RSL 1.0 terms: HTTP
Link header, then HTML <link rel="license">, then robots.txt. A prohibited or OLP-only page is refused before anything runs, at $0.00. A payment type="use" page adds a royalty line to the quote.
- Quote. Every call gets an HTTP 402 first, with the price: tool fee plus royalty lines.
- Verify.
wring writes a brief where every claim carries an exact quote and its offsets. A separate verifier checks it (table below). Only a PASS is added to the tab.
- Royalty. A source earns its royalty only if the call passed and at least one claim quoting that source passed the span check.
- Close. One capture of the total with
final_capture: true, then a void if anything is still held. Royalties go to each payee's ledger, and PayPal Payouts pays them.
This is the beginning of the README. Read the rest at the original. Read the full README ↗
