Core design
Quotes, authorizations, charges on two axes, flows, reservations, and reconciliation — the model behind Tollstile.
Pre-release · planned API
Per-call payment protocols are not "one request, one payment". x402 defines several flows, L402 credentials are reusable, KYAPay tokens are funded holds charged many times, MPP sessions are drawn down per call, and AP2 and Visa TAP bind evidence to verifier nonces. Tollstile's core separates:
- Quote — what the server offered. Signed, immutable, never stored. See Quotes.
- Authorization — what the payer authorized: single-use or reusable up to a limit.
- Charge — each economic effect against it, on a payment axis and a fulfillment axis. See Authorizations and charges.
- Flow — the order in which the two axes advance. See Flows.
- Reservation — value held by policies such as credits follows reserve → commit / release.
- Reconciliation — unknown outcomes are resolved by asking the provider. See Run reconciliation.
The full design document is DESIGN.md in the repository; the TypeScript contracts in packages/tollstile/src/core/types.ts are authoritative.