AGORA.GRIPE
Securitytrust models

What security, with which setup

Trust is something you decide, not something we promise. Here is what each setup actually guarantees, and where the guarantee ends.

// start here

Do you trust whoever runs the gateway?

Answer this first. It decides whether you need anything below.

simplest

Yes, you self-host or a friend runs it

Any setup works, the custodial path is fine, verification is optional. Your safety rests on the operator, who is you or someone you know.

needs verification

No, a public or unknown gateway

You need a verifier the gateway cannot tamper with. Pick a setup below. The gateway becomes plumbing that cannot cheat you.

// setups

What each setup guarantees

Green holds. Amber holds only under a condition. Grey rests on trusting the operator.

SetupCan't keep your fundsCan't redirectProof it settledWho verifies

Trusted gateway

self-host or a friend

by trustby trustby trustthe operator

Backend SDK

your server verifies

yesyesby trustyour server

Serverless proxy

static QR + edge SDK

yesyesby trustthe proxy

Browser SDK

verify in the page

yesconditionalby trustthe page *

* Browser verification is real only when the page is served by someone other than the gateway.

Settlement is the preimage the gateway reports. It proves the payment hash, not that funds moved. The independent check is the preimage your own paying wallet obtained.

// the honest ceiling

What always holds, and the catch