RAFCF 1.0 · Draft 0.2 · July 2026

The system of record for AI agent financial actions.

Priced and built as a control, not a take-rate. Reddix records every agent-initiated instruction that creates, alters, extinguishes, or transfers a financial obligation — classifies it by reversibility, gates the material ones for maker-checker approval, and recovers value where a mechanism exists.

Record · Classify · Gate · Recover
01 · The scenario you can't unwind

By the time a bad payment clears, the decision that caused it was made hours earlier — and nobody governed that either.

Where the loss is actually created
An agent approves an invoice, issues a purchase order, grants a credit, or changes a payee’s bank details. The payment that follows is downstream automation with no independent judgement in it. Governing only the payment leaves the decision that created the loss ungoverned — and on an instant or irrevocable rail, there is nothing left to approve by the time it surfaces in the close.

Draft 0.2 widens the atomic unit from money movement to financial obligation. The accountable officer is responsible for the completeness and accuracy of liabilities, not only for disbursements.

Four verbs, one linked record

Every agent financial action runs the same chain — recorded, classified by reversibility and materiality, gated when material, recovered when a mechanism exists.

01 · RECORD

Record

Every action, classification, gate decision and outcome lands in an append-only, tamper-evident ledger.

02 · CLASSIFY

Classify

Tiered against RAFCF and assigned a control reference before it is gated or released.

03 · GATE

Gate

Material actions are held for maker-checker approval — a durable state, not a blocked connection.

04 · RECOVER

Recover

The inverse is armed at classification and executed on trigger. Where none exists, the attempt is documented.

02 · What counts as an action

Two classes, one tier scale.

A single reversibility scale governs both — but the property that fixes the tier differs.

Commitment action

Changes an obligation

Issuing a purchase order, approving an invoice, accepting a quote or contract term, granting a credit, changing a price, committing to a recurring charge, or altering a payee's banking details. Tier is fixed by contractual formation and counterparty reliance — whether the organization can still withdraw unilaterally.

Movement action

Transfers value

An instruction to move value across a payment rail, processor balance, or internal ledger. Tier is fixed by the rail's finality law — ACH within window, cards, instant rails, wires, on-chain settlement each carry a different honest promise.

The highest-leverage field in the obligation surface
A change to a payee's banking details converts every future correctly-approved payment into a misdirected one, with no defect visible in any individual payment. RAFCF treats master-data mutation as a Tier 2 agent financial action in its own right, requiring maker-checker independent of any payment it later affects.
03 · The gate, shown

An agent stopped at the threshold — a human deciding.

Amber only ever means a human needs to look. This is the moment the whole product is built around.

The pre-commit window is a durable state, not a held connection. The action carries an identifier that survives the initiating request, the agent's thread is never blocked, and the outcome — released, denied or expired — records the true actor. A hold withholds release of the instruction; it never takes custody of the value.

Adopt it on your terms

Start where it breaks nothing. Earn your way inline. Expand into recovery once the record has proven itself.

Level 1 · Observe

Observe

Every agent financial action is logged, tiered and assigned a control reference in shadow mode. No gating yet — this is the exposure report.

Observe requires no code in your payment path.
Level 2 · Gate

Gate

Enforced maker-checker on material actions for routed surfaces, with fail-open / fail-closed policy defined per tier in advance and durable holds.

Conformance is per-surface and per-integration — never blanket.
Level 3 · Recover

Recover

Armed compensation and prepare-and-instruct recovery, with loss events captured to the RAFCF schema.

Recovery is per-rail and best-effort — never universal undo.
04 · The record

The Compliance Vault you hand your auditor.

  • Tamper-evident, hash-chained history of every agent financial action.
  • Reversibility tier, materiality, and the maker-checker decision on each.
  • A control reference propagated into the executing instruction and the resulting accounting entry — so an auditor can trace a sample of entries back to the decision that authorized each.
  • Complete export of the record on request, without conditions, so the evidence chain survives a change of implementation.
#4471 TXN·4471 · tier 2 · HELD · $214,000.00
#4470 TXN·4470 · tier 1 · CLEARED · $8,240.00
#4469 TXN·4469 · tier 3 · REVERSED · $51,900.00
#4468 TXN·4468 · tier 0 · CLEARED · $312.55
hash · a7f3…9c21 → 4e08…bb17 → …

Start with the exposure report.

Run Reddix at Level 1 in shadow mode for 30 days and see your governed volume, tier distribution and exposure in your own numbers — before anything goes inline.

Talk to us · founder@reddix.ai