One step.
Yours.
Delegate.Appear.Resume.
The law needs the human for one act. The desk takes the afternoon: four hours at the desk to produce one signature. This page posts the motion that ends that trade: the agent walks every step of the deal on the record, and at the one legally-bound moment it hands you a typed NEEDS_HUMAN envelope. You decide in seconds; the agent resumes the moment approval lands. Built on the VIN by Vin.
An agent that reaches a legally-bound step on these rails receives this envelope: typed, addressable, resumable. Never a dead end, a form, or “contact sales.”
JM3KFBXY1S0597748
2025 Mazda CX-5
- statusThe typed stop: the flow waits, it never diesNEEDS_HUMAN
- decisionThe one act the law reserves for the human: FCRA written instruction, the lending specimenAuthorize the credit pull
- urlThe gated step, addressable: the tool that returned this envelope returns it verbatimPosts live
- shortUrlSigned · expiring: the human’s link; it opens the one decision and nothing elsePosts live
- pollUrlRFC 8628: the agent polls while the human decides; GET is side-effect-freePosts live
- expiresAtPosted with the envelope: a lapsed Handoff re-issues, it never danglesPosts live
This card states the shape, not a session. A live envelope posts its values at the gate; a field without an issued value states its slot in words, never a stand-in.
The handoff, typed.
One envelope, one decision, and the whole walk around it, on the record.
The law reserves a single moment; the desk annexes the afternoon around it. This envelope is that moment, typed: the one decision the law reserves for a human, posted with everything an agent needs to wait for it correctly. A link for the human, a poll for the machine, an expiry for both.
Everything else is the agent’s walk, on the record: it reads the evidence, settles OFFERs under its Mandate ceiling, and posts every step to the deal ledger. Your calendar is untouched until the envelope issues, and when it issues, it names one act, never an afternoon.
The handoff is typed, or it is a conformance failure.
- 01Read the recordEvidence read at the addresses: every fact value · source · timestampDone
- 02Shop the termsfinancing.vin/JM3KFBXY1S0597748OFFERs settled under the Mandate ceiling, posted to the deal ledgerDone
- 03Authorize the credit pullyoufinancing.vin/JM3KFBXY1S0597748The one decision, this envelope: the human appears here, for secondsNEEDS_HUMAN
- 04Sign the applicationResumes on approval: the signed artifact posts to the recordWaits
- 05Fund and postResumes on approval: distance-to-done never resetsWaits
Step names are the lending specimen’s structure, not a transcript. “you” marks the one step the law reserves for the human; the agent walks the rest.
The one-step law.
Two typed outcomes, family-wide, and the human only where the decision is load-bearing.
Every gate in the family returns one of two shapes: OFFER (posted price, hard ceiling, x402) or NEEDS_HUMAN. Never a dead end, a form, or “contact sales.” An agent can plan an entire deal against gates like that, because every stop is typed and every wait is resumable.
- OFFERPosted price · hard ceiling · x402: the machine transacts under its Mandate ceiling
- NEEDS_HUMANurl · signed shortUrl · pollUrl · expiresAt: the human appears, once
Polling changes nothing but the asking: GET is side-effect-free. A gate that returns anything but the two shapes above is a conformance failure, and reads as one.
The human appears only where the decision is load-bearing: payment OAuth, consent, signature, notarization. Everything the agent does survives being shown to them afterward: the receipt is the posted deal record itself.
You appear for seconds. The agent resumes on approval. Distance-to-done never resets.
The specimens.
None of this is a slide: the motion runs in production.
buy.vin’s checklist runs the motion in production: the buyer’s agent walks the deal and the human appears at Authorize Bank, eSign, Upload License, Notarize POA, and payment. Notarize POA is a credentialed fn:Human leaf, and the signed artifact returns to the deal record.
Both sides of the handoff are partners here. Demand side: your gated moments become typed Handoffs on VIN rails. Supply side: notary, insurance producer, attorney, CPA, appraiser. The reserved act, typed and credential-verified, paid per act on the deal record.
- Envelope · typedurl · signed shortUrl · pollUrl · expiresAt; a gate that returns anything else is a conformance failure
- Leaf · credentialedThe reserved act performs as fn:Human in the Function graph; credential verified at the membrane (auth.vin / id.org.ai), signed artifact returned
- Resume · RFC 8628The agent polls, approval lands, the flow continues without re-acquisition
No take rate on this door: this page is the description; the siblings are the transaction. The reserved act is paid per act on the deal record, and fees settle where they are posted. The check digit certifies; it never sells.
- buy.vinThe production specimen: 7 steps, the human at Authorize Bank · eSign · Upload License · Notarize POA · payment; Notarize POA a credentialed fn:Human leaf
- financing.vinThe lending specimen: the agent shops the rates; the human authorizes the credit pull and signs the application. Two Handoffs, one record
- insure.vinBind is a licensed-producer reserved act: supply leaf and demand consent on one record
The spectrum.
Three motions, one grammar: the only thing that moves is where the human stands.
b2a.vin runs with no human anywhere: wallet, Mandate ceiling, settlement. b2a2c.vin puts the agent in front of a consumer who holds the Mandate and gets the receipt. This address is the middle term: the human at exactly one step, every other step walked, every wait typed.
- b2a.vinNo human anywhere: the buyer is an agent; wallet, Mandate ceiling, x402 settlement
- b2a2c.vinThe agent buys for a consumer: the human holds the Mandate and gets the receipt
- apis.vinThe plug-in surface every Handoff runs on: one key, one MCP server; the gated tools return the envelope verbatim
- vin.companyEvery door, one record: vin.company/{VIN}
Delegation without dispossession: the Handoff points are exactly the moments you appear in person in your own story.
For the agent you send.
The agent reads the same record you do.
Same two routes, three representations: the numbers never differ between them.
- Motionsb2h2aThe human appears once, where the act is legally load-bearing; then the agent resumes
- Machine surfaces/llms.txt/icp.json/.well-known/agents.json
- One MCP serverapis.vin/mcp serves the whole platform: every door’s tools in one server, each result carrying its door’s URL.
- AttributionX-Client-Type: html | md | json | mcp names which reader arrived; it never changes the record.
- The gateNo gate on this door's two routes: keyless reads, no account. Gated actions elsewhere return a typed OFFER or a NEEDS_HUMAN handoff, never a dead end.