| PayPal | Sandbox | Orders, holds, captures, refunds, payouts and disputes. No real money moves. |
| Arbitrum Sepolia | Testnet | Bond vault, reserve, verdict verifier and the log's checkpoint anchor. Test PYUSD. |
| TEE leg A · Intel TDX on Phala Cloud | Production | Real attested hardware. Issues mandates, reads PayPal, countersigns. |
| TEE leg B · AWS Nitro Enclaves | Production | Real attested hardware. Re-evaluates every cart; both signatures are required. |
| Alibi log and witnesses | Production | Public append-only Merkle log, checkpoints co-signed by independent witnesses. |
| Claude (Anthropic API) | Production | Compiles mandates, drives the shopping agent and the red team, drafts dispute answers. |
| Agent browser (Kernel) | Production | The shopping agent's cloud browser, with a read-only live view. |
| Demo store | Sandbox | RunFast, a store we run so attacks can be planted; it checks out with PayPal sandbox. |
