One step.
Yours.

Delegate.Appear.Resume.

The law needs the human for one act. The desk takes the afternoon: four hours at the desk to produce one signature. This page posts the motion that ends that trade: the agent walks every step of the deal on the record, and at the one legally-bound moment it hands you a typed NEEDS_HUMAN envelope. You decide in seconds; the agent resumes the moment approval lands. Built on the VIN by Vin.

An agent that reaches a legally-bound step on these rails receives this envelope: typed, addressable, resumable. Never a dead end, a form, or “contact sales.”

2025 Mazda CX-5 · check digit 1 · verified

The Handoff envelopeb2h2a.vin/JM3KFBXY1S0597748

JM3KFBXY1S0597748

2025 Mazda CX-5

  • statusThe typed stop: the flow waits, it never diesNEEDS_HUMAN
  • decisionThe one act the law reserves for the human: FCRA written instruction, the lending specimenAuthorize the credit pull
  • urlThe gated step, addressable: the tool that returned this envelope returns it verbatimPosts live
  • shortUrlSigned · expiring: the human’s link; it opens the one decision and nothing elsePosts live
  • pollUrlRFC 8628: the agent polls while the human decides; GET is side-effect-freePosts live
  • expiresAtPosted with the envelope: a lapsed Handoff re-issues, it never danglesPosts live

This card states the shape, not a session. A live envelope posts its values at the gate; a field without an issued value states its slot in words, never a stand-in.

The handoff, typed.

One envelope, one decision, and the whole walk around it, on the record.

The law reserves a single moment; the desk annexes the afternoon around it. This envelope is that moment, typed: the one decision the law reserves for a human, posted with everything an agent needs to wait for it correctly. A link for the human, a poll for the machine, an expiry for both.

Everything else is the agent’s walk, on the record: it reads the evidence, settles OFFERs under its Mandate ceiling, and posts every step to the deal ledger. Your calendar is untouched until the envelope issues, and when it issues, it names one act, never an afternoon.

The handoff is typed, or it is a conformance failure.

The walk, posted as it happensOne human step
  1. 01Read the recordEvidence read at the addresses: every fact value · source · timestampDone
  2. 02Shop the termsfinancing.vin/JM3KFBXY1S0597748OFFERs settled under the Mandate ceiling, posted to the deal ledgerDone
  3. 03Authorize the credit pullyoufinancing.vin/JM3KFBXY1S0597748The one decision, this envelope: the human appears here, for secondsNEEDS_HUMAN
  4. 04Sign the applicationResumes on approval: the signed artifact posts to the recordWaits
  5. 05Fund and postResumes on approval: distance-to-done never resetsWaits

Step names are the lending specimen’s structure, not a transcript. “you” marks the one step the law reserves for the human; the agent walks the rest.

The one-step law.

Two typed outcomes, family-wide, and the human only where the decision is load-bearing.

Every gate in the family returns one of two shapes: OFFER (posted price, hard ceiling, x402) or NEEDS_HUMAN. Never a dead end, a form, or “contact sales.” An agent can plan an entire deal against gates like that, because every stop is typed and every wait is resumable.

Two shapes, family-wide
  • OFFERPosted price · hard ceiling · x402: the machine transacts under its Mandate ceiling
  • NEEDS_HUMANurl · signed shortUrl · pollUrl · expiresAt: the human appears, once

Polling changes nothing but the asking: GET is side-effect-free. A gate that returns anything but the two shapes above is a conformance failure, and reads as one.

The resume: RFC 8628, GET side-effect-free
1GET pollUrl
2 -> authorization_pending the human has not appeared yet
3
4 the human opens shortUrl one decision, seconds, not an afternoon
5
6GET pollUrl
7 -> approved the signed artifact posts to the deal record
8 the agent resumes, no re-acquisition

The human appears only where the decision is load-bearing: payment OAuth, consent, signature, notarization. Everything the agent does survives being shown to them afterward: the receipt is the posted deal record itself.

You appear for seconds. The agent resumes on approval. Distance-to-done never resets.

The specimens.

None of this is a slide: the motion runs in production.

buy.vin’s checklist runs the motion in production: the buyer’s agent walks the deal and the human appears at Authorize Bank, eSign, Upload License, Notarize POA, and payment. Notarize POA is a credentialed fn:Human leaf, and the signed artifact returns to the deal record.

Both sides of the handoff are partners here. Demand side: your gated moments become typed Handoffs on VIN rails. Supply side: notary, insurance producer, attorney, CPA, appraiser. The reserved act, typed and credential-verified, paid per act on the deal record.

  • Envelope · typedurl · signed shortUrl · pollUrl · expiresAt; a gate that returns anything else is a conformance failure
  • Leaf · credentialedThe reserved act performs as fn:Human in the Function graph; credential verified at the membrane (auth.vin / id.org.ai), signed artifact returned
  • Resume · RFC 8628The agent polls, approval lands, the flow continues without re-acquisition

The spectrum.

Three motions, one grammar: the only thing that moves is where the human stands.

b2a.vin runs with no human anywhere: wallet, Mandate ceiling, settlement. b2a2c.vin puts the agent in front of a consumer who holds the Mandate and gets the receipt. This address is the middle term: the human at exactly one step, every other step walked, every wait typed.

Delegation without dispossession: the Handoff points are exactly the moments you appear in person in your own story.

For the agent you send.

The agent reads the same record you do.

Same two routes, three representations: the numbers never differ between them.

Three representationsb2h2a.vin
1curl https://b2h2a.vin/ -H 'accept: text/markdown'
2 # the markdown twin of this page
3curl https://b2h2a.vin/{VIN} -H 'accept: application/json'
4 # the record as typed evidence objects
5curl https://b2h2a.vin/{VIN} -H 'accept: text/markdown'
6 # the record's markdown twin
On this host
  • Motionsb2h2aThe human appears once, where the act is legally load-bearing; then the agent resumes
  • One MCP serverapis.vin/mcp serves the whole platform: every door’s tools in one server, each result carrying its door’s URL.
  • AttributionX-Client-Type: html | md | json | mcp names which reader arrived; it never changes the record.
  • The gateNo gate on this door's two routes: keyless reads, no account. Gated actions elsewhere return a typed OFFER or a NEEDS_HUMAN handoff, never a dead end.