AgentPay is a Developer Preview and has not received an independent production security audit.

Report vulnerabilities privately to security@x2v.co. Do not open a public issue containing private keys, payment signatures, customer data, or exploitable transaction details.

Never use the recorded fixture key or addresses for real funds. Live deployments must configure their own merchant key, recipient, RPC, facilitator allowlist, provider key, and durable transactional store.