BitPOS

BitPOS with Muse gives small Thai cafes an AI that knows their menu, respects their prices and works for the owner, with no new app for customers. Problem: cafe customers already live on Messenger, but small shops cannot recognise them, nobody wants one more app, and owners have no time to write promotions or answer every chat. What we built (26 Oct to 4 Nov 2026) on top of the existing BitPOS point of sale: - Tap at the table, consent once in Messenger, and the shop recognises the customer. NTAG 424 DNA SUN URLs are verified by AES-CMAC with a forward-only counter so replayed links are refused. (The live demo also has a Table 1 card with a plain static link, which can be copied and is labelled as such in JUDGES.md.) - Muse Spark picks one owner-approved offer and explains why; the server sets every price. - Order by chat or voice in Thai and English: Muse Spark edits a stored cart through server tools. Payment is Stripe Checkout. - AI allowance: the customer lets the shop's AI pay for 1 day to 3 months within per-order and total caps, and can stop at any time. - Table booking by chat, with pre-orders held out of the kitchen queue until the customer taps in. - BitPOS Muse Connector (MCP): a customer's own agent can read the menu, get a server quote and check out. It passes IDs only and never sets a price or sees a card. - Owner tools: Muse Spark drafts promotions, Muse Image draws banners, a person approves, and a bounded Allow All policy has a daily cap and can be revoked at once. Offers appear on the BitPOS Mini table screen, and all channels share one POS. Production safety: PAID comes only from a signed webhook or a server lookup, duplicate events have no effect, data is isolated by row-level security, every model call is in an evidence ledger, and a deterministic fallback keeps the shop selling if the model is down. Status: deployed at meta-pay.cashlessthailand.com and meta-pos.cashlessthailand.com. All payments are Stripe sandbox with a US test merchant, no real money. The Meta app is in development mode, so Messenger answers accounts with an app role. Live access can be arranged for judges. See meta-hackathon/JUDGES.md and PROVENANCE.md for what is new and what existed before.