What's actually built.

Every other page on this site describes how AgentRail works. This one says, plainly, how much of it exists right now.

built

Core types: Schema-validated payment intents, policies, and decisions.
Policy engine: The pure evaluate() function — kill switch, allowlists, caps, rate limits, time windows, escalation.
Signer: Local encrypted keystore. Checks the kill switch again immediately before signing, not just at evaluation.
Chain submission: Tracks transactions against blockhash expiry and reconciles late confirmations instead of assuming success.
Postgres-backed store: Durable reservations with real per-wallet advisory locks, tested against a real database, not mocks.
Demo agent: A small x402 pay-per-call agent that exercises the full path — real policy checks, real signing, real settlement. Runs on devnet by default; also proven on Solana mainnet in real USDC, including a real policy denial once the wallet’s lifetime cap was spent. See /docs.
npm package: npm install @pyco404/agentrail — published, real, installable today. See /docs.

Hash-chained audit log: The durable decision history exists today — every allow, deny, reservation, and release is persisted. The tamper-evident chaining on top of it is designed, not yet wired.

Hosted service: We would run the engine; you would reach it over HTTP — same policy engine, same KeyProvider, same schema, not a fork of the library. Four routes are planned (POST /intents, GET /intents/:id, POST /approvals/:id, POST /kill-switch) but none of it is built yet — see /docs.
Managed / HSM custody: The signer interface is built to support it — see /custody. Nothing beyond the local keystore exists yet, which is exactly why the hosted service (above) will stay devnet-only once it exists: a single shared passphrase on one disk, with no rotation path, is correct for a developer running their own process and disqualifying for us holding anyone else’s real funds.

Nothing on this site describes a service you can sign up for today. The code is real, tested against real infrastructure, and available on GitHub.