Bursar pays a small company's invoices without ever handing the AI a key. Invoices are read inside a NEAR AI Cloud enclave, a NEAR contract decides inside limits the owner set, and the only thing that moves USDC is a dumb executor the contract keeps on a leash.
The invoice is rasterized and read by a model running in a TEE on NEAR AI Cloud. The answer comes back with an ECDSA signature over the exact bytes and an Intel TDX quote bound to a fresh nonce. The agent holds one function-call key that can only call request_payment.
The vendor must be registered by the owner. The payout on the invoice must equal the one on record, so the new bank details fraud dies here. Per-payment, daily and monthly caps apply. Above a threshold the contract opens a Sputnik DAO proposal and waits for the council.
NEAR vendors are paid in the same transaction. Vendors on Base, Arbitrum, Solana or Sui go through NEAR Intents, and the contract checks the destination against the owner's record before the executor can settle. Every decision is an on-chain event; there is no database.
The receipt holds the exact request and response bytes, the enclave's signature, the attestation report with the TDX quote and the nonce the agent chose. Change one byte and the signature fails. The contract stores a compact reference to it next to the payment.
Step 6 of the README walks through it. The verifier does not yet replay the RTMR3 event log or check GPU evidence; the receipt keeps both.
Log in with your NEAR wallet. No treasury yet? Bursar creates one on the spot, at no cost to you. Then drop a PDF and watch the enclave read it, the receipt verify, and the contract answer.
Open the console
Bursar