Policy, clock and connections
Demo clock
Moves Nightshift's detector clock forward so time-based incidents show up now. PayPal always sees real time, and nothing sent to PayPal changes.
Policy
The rules the gate applies to every proposal. Refunds and voids always need you; nothing outside the allowlist ever runs.
Owner access
Approvals, policy changes and the lab need the owner passcode on this instance.
Connections
| PayPal sandbox | Ready | Client credentials set (api-m.sandbox.paypal.com) |
|---|---|---|
| Webhooks | Ready | Webhook 5BW97563RU6336948, every delivery verified with verify-webhook-signature |
| Sweep and Transaction Search | Ready | Last 2026-11-10 04:20 UTC: 47 orders, 23 invoices |
| AI agent | Ready | anthropic/claude-haiku-5.5 via https://openrouter.ai/api/v1 |
| Telegram approvals | Not set | Optional: TELEGRAM_BOT_TOKEN + TELEGRAM_CHAT_ID |
| AG Studio licence | Not set | No key: trial watermark on deployed hosts |
| Worker | Ready | Runs inside the web server |
What the gate allows
| Action | Auto | Needs you |
|---|---|---|
| Capture authorization | Shipped order, amount equals the authorization, under the limit, no earlier decline | Not shipped, above limit, partial or over amount, earlier decline; forbidden above 115% / +$75 or after expiry |
| Reauthorize | Same or lower amount | More than the original; forbidden above 115% / +$75 or after expiry |
| Send invoice reminder | Invoice open and not reminded inside the cooldown | Reminded recently; forbidden when paid or cancelled |
| Void authorization | Never | Always |
| Refund capture | Never | Always; forbidden above what is left to refund |
| Mark resolved | When the ledger shows the money settled | When money is still at risk |
| Ask the owner | Never | Always (it is a question) |
| Anything else | Never | Never: forbidden |