Pocket Change

OAuth agent flow

Demo walkthrough: act-as-user · via-agent audit · humans only where they choose. Prototype only — no real money movement.

Human-in-loop prefs Govern my agent within my scopes only
Payment SMS doorbell always on — agents cannot silence it
OAuth 2.1 · Auth Code + PKCE · act-as-user via agent
loans:propose loans:agree payments:propose loans:read payments:read

Every action logs actor=agent-client, subject=Ty, via_agent=true. No money:move scope.

Client
Agent client agent

Delegated client for Ty. Never a hidden party. Never consents for Mom.

Story

The agent drafts a $200 vet bill onto the Household tab with yardstick fixed $50 / Fri. Mom’s agent reviews & agrees. Payment SMS still rings the human phone. Ledger lines carry a via agent audit badge.

Demo, reference only. Not the real app and not the architecture. No real money movement. Twilio webhook at POST /demo/api/sms.