v1 · design partnersoc · console
managed agent + pledge
§ about

A protocol family with a thin commercial edge.

OrangeCheck is six open Bitcoin-stake protocols, MIT-licensed and self-hostable, plus one managed product that operates them at audit-grade for enterprises deploying AI agents. Same shape as Breez (open SDK, managed LSP), Speed (open Lightning rails, managed checkout), or Synota (open settlement, managed product). Open protocol below. Thin commercial edge above. Basis points on the flow.

The thesis

Enterprise AI agent rollouts stall at the same place: compliance review. The existing identity stack — OAuth, service accounts, Auth0/Okta — was not designed for autonomous principals. There is no deterministic time-ordering of scopes against revocations, no cryptographic action audit, no offline-verifiable replay. Sessions don't survive the issuer disappearing.

OrangeCheck's answer is to anchor authority and reputation to Bitcoin: BIP-322 delegation, OC Stamp envelopes per action receipt (the family's provenance primitive — built on OpenTimestamps), content-addressed bundles, scoped revocation that verifies offline forever. The protocols underneath are open and free. Console sells the operations, the integrations, and the audit-grade dashboards on top.

The family

Six verbs, all live, all public goods. Identity (oc attest), confidentiality (oc lock), legitimacy (oc vote), provenance (oc stamp), authority (oc agent), reputation (oc pledge). Each has its own spec repo and reference web app. The family is closed at six.

Console productizes only two: Agent and Pledge. The other four make Agent more valuable through composition (Attest for sybil resistance on agent-to-agent calls, Stamp for signed action artifacts, Vote for governance over agent fleets, Lock for confidential payloads) but they are not what this site sells.

The economics

Sat-denominated, first-class. Lightning is the primary rail; Stripe is the dollar fallback. Every USD price is published with its sat equivalent on the same row. We do not surcharge Lightning, do not require fiat onramp, and treat sat-paid customers as indistinguishable from dollar-paid customers in product access and audit posture.

No token. No custody. No points. The unit of account is sats and dollars. Bonded reputation is attestation-of-unspent — sats stay in the customer's wallet. The full list of public commitments is on /charter.

The voice

Lowercase “orangecheck” in prose. “OC Agent” in prose; “oc agent” in headings and nav. Three-beat taglines (“scoped, revocable, offline”). Direct, technical, unhyped. We name trust anchors plainly. We do not write “supercharge,” “unleash,” “revolutionary,” or any AI-marketing-LLM filler — and you should call us out if we do.

the north star

Every Lightning payment is more valuable when the receiver is sybil-resistant. Every federation needs guardian-authorization that survives a guardian going rogue. Every energy contract needs counterparty authority that's auditable and revocable. Every notarization is stronger when the signer is bonded. Every merchant integration is better when the agent making the payment has a verifiable scope. We are the cross-cutting authority and reputation layer that makes the rest of this ecosystem safer.