Cedulon

Policy-gated agent spend with signed receipts and rail-extract audit. Every payment an agent makes is capped by user-set limits and carries a COSE-signed receipt; the receipt chain is audited and reconciled against the payment rail's own ledger, so missing or mismatched evidence is reported, not hidden. **Tools:** `cedulon_spend`, `cedulon_audit`, `cedulon_verify_receipt`, `cedulon_export_ledger`, `cedulon_status`. Local (stdio) server, Node 20+, no runtime dependencies beyond the official MCP SDK. Apache-2.0. Spec: `draft-dogru-cedulon` on the IETF Datatracker. Docs: https://cedulon.com · Source: https://github.com/dogrucanemek-alt/cedulon

First seen 2 Oct 2026. Evidence as of 5 Oct 2026.