0xInan

APE for Business APE for Business gives each business its own APE agent, with its own name, phone number, and email address. Customers text or email the agent. Every tool call the agent makes is checked against a Sigil badge before it runs, with the Sigil gate wired into invokeTool before dispatch, fail-closed, only for profile entries carrying sigilServer and sigilVersion. Trusted calls run, untrusted calls are blocked, and both outcomes go to the audit trail. Verified allow case: @apify/actors-mcp-server 0.17.1, 100/low. Verified policy case: @modelcontextprotocol/server-github 2025.4.8, 65/high. Verified block case: fixture-server 0.1.0, 0/critical, revoked, labelled a Sigil test fixture, not a real MCP server. Muse Wonder 1.0 via the Meta Model API drove the loop: the allow case finished with 'wonder loop test', the block case recorded two sigil_blocked:revoked steps, and the blocked tool never ran. Gate tests: 22 pass. Gate policy is PROPOSED, not confirmed: block high, critical, unknown, bad signature, and revoked; allow low and medium. A badge proves identity, version, and risk level only, not job quality. Stripe, SMS, and AWS paths are test mode and dry run only, $0 spent. No live Stripe, AWS, or SMS claim. No production Sealbox vault claim.