67 resources across foundation, identity, and application modules with S3 remote state, DynamoDB locking, least-privilege IAM, and AWS Budgets.
Featured project / AgentPay
Payments for APIs,
built to be verified.
A Go modular monolith for non-custodial x402 USDC micro-transactions on Base Sepolia, giving AI agents and browser buyers a secure path to purchase APIs with exact-price settlement.
<42msP95 API latency
<8msP99 query latency
188+Entity access patterns
67Terraform resources
Architecture
One deployable system.
Clear domain boundaries.
Browser / AI agentx402 payment request
↓
API Gateway HTTP API v2authenticated edge
↓
Go 1.22+ Lambda ARM6417 isolated domain packages
CatalogIntentsPaymentsProxyEvidenceDisputesSettlement
↓
DynamoDBS3 Object LockAWS KMSBase Sepolia
The modular monolith keeps deployment and operations simple while preserving domain-level seams. Catalog, intents, payments, proxy, evidence, disputes, and settlement can evolve independently behind explicit interfaces.
Data and evidence
Fast reads.
Deterministic disputes.
A DynamoDB single-table design covers 188+ entity access patterns across four GSIs. Conditional writes provide idempotency without distributed locking, keeping P99 query latency below 8ms.
The append-only evidence ledger combines S3 Object Lock, AWS KMS P-256 ECDSA signatures, and chained transaction hashes. Every dispute can be resolved against a tamper-evident sequence of signed events.
Security boundary
Assume the upstream
is hostile.
The upstream proxy sanitizes URLs, blocks private IP ranges and AWS metadata endpoints, protects against replay, and issues short-lived ES256 execution capabilities.
- URL sanitization
- Private IP blocking
- Replay protection
- Short-lived ES256 capabilities
Delivery surface
From infrastructure
to developer tooling.
TypeScript stdio JSON-RPC connector with five-minute ES256 capabilities and seller confirmation grants for IDE agent interactions.
Merchant SDK and cryptographic verification across Go, TypeScript, Python, Java, .NET, PHP, and Ruby.