SandboxSandbox only. No real money. Seeded catalog. Simulated carrier.
SafePayAI
PayPal sandbox · test funds

Where PayPal fits.
What the AI does.

One purchase, start to finish. Each step says who acts: PayPal, the AI, or the rules. The figures below are an illustration, not account data.

Who does what

PayPal does
  • Hosts the sandbox approval page you are sent to
  • Creates and captures the order (Orders v2)
  • Sends the refund when the rules approve one
AI does
  • Turns your words into a draft cart
  • Reads a problem report and suggests a label
  • Holds no PayPal credentials and cannot pay
Rules decide
  • Check every cart against your signed mandate
  • Detect late or lost orders from the carrier clock
  • Set the refund amount and tier. Nothing else does
The AI boundary

AI classifies and drafts. It never decides money.

On any error or low confidence it hands the case to a person.

  1. You do

    You sign a mandate.

    A spending cap, which shops, an end date and the refund terms. Sign once. That mandate is the only authority anything else gets.

    • The cap, the per-cart limit and the end date are fixed when you sign.
    • You can revoke it. That stops future purchases.
    Mandate activeIllustration

    $500.00

    Shops
    Electronics, home
    Per cart
    $150.00 max
    Ends
    30 days
    Refund terms
    Late or lost, 14-day window
  2. AI doesRules decide

    The agent drafts. Rules check.

    Two ways to fill a cart. Describe what you want in words and the AI shopping agent drafts one from the seeded catalog, or browse the marketplace and add items yourself. Either way, plain rules check the cart against your mandate.

    • Browsing is optional. The server still prices and checks the cart.
    • The agent never holds PayPal credentials and never pays.
    • Prices come from the catalog, not from the agent's words.
    • If the agent fails or is unsure, you get the form instead.
    AI drafted · rules decideIllustration

    “Headphones under $150”

    • Draft: wired headphonesDraft
    • Inside the capPass
    • Shop is in scopePass
    • Under the per-cart limitPass

    The agent can propose. It cannot approve or pay.

  3. PayPal doesYou do

    PayPal sandbox takes the payment.

    You are sent to PayPal's sandbox to approve the order. When you come back, checkout captures it through PayPal Orders v2. Test funds only.

    • Only the PayPal adapter holds PayPal credentials.
    • The order and capture ids appear on your receipt.
    PayPal sandbox orderIllustration
    1. 1Checkout creates the orderPayPal does
    2. 2You approve it on PayPal (sandbox)You do
    3. 3Checkout captures itPayPal does
  4. Rules decide

    Tracking is a clock we control.

    Delivery status comes from a simulated carrier that we run. It is not real carrier data and not PayPal data. It exists so late and lost orders can be shown on demand.

    • Every carrier screen is labelled, so nobody mistakes it for the real thing.
    Simulated carrierIllustration
    1. Ordered
    2. Shipped
    3. Due
    4. Late

    Six days past the promised date, on the sandbox clock.

  5. Rules decide

    Rules spot it and make an offer.

    A deterministic policy engine reads the order, the carrier record and your mandate terms. If a late or lost order qualifies, you see an offer. Every check is listed.

    • The same inputs always give the same answer.
    • Where the AI helps, it only reads your report and suggests a label.
    • Unclear or unusual cases go to a person.
    Rules decidedIllustration
    1. Protected
    2. Problem found
    3. Offer
    4. Decision
    5. Resolved
    • Order inside mandatePass
    • Late by 6 days (simulated)Pass
    • Inside the claim windowPass
    Offer$48.20
  6. PayPal doesRules decide

    PayPal sends the refund.

    When you accept, the refund goes out through PayPal's refund API. The merchant funds it. The amount is the one the rules set.

    • Merchant-funded via PayPal refund.
    • Large or unusual refunds need your explicit approval first.
    Rules decided · refund via PayPal (merchant-funded)Illustration
    Refund sent+$48.20

    Sandbox refund, test funds.

  7. Rules decide

    Every money action is logged.

    Mandate signed, order captured, case opened, offer made, refund sent: each lands in an append-only audit log. Each entry carries the hash of the one before it, and a check re-reads the chain.

    • Anyone signed in can open the audit log and run the chain check.

    Audit chain

    Illustration
    1. mandate.signed#1 · prev hash
    2. order.captured#2 · prev hash
    3. case.opened#3 · prev hash
    4. refund.sent#4 · prev hash

See it on real screens.

Try the demoBack to home

Sandbox build. Test funds only. Carrier data is simulated. Not affiliated with PayPal.