Developers
Attest is the platform; the Attestation API is how you build on it. An attestation is a signed, tamper-evident statement — this identity was verified, this payment matched, this record is sealed — verifiable by anyone, later, without trusting us.
Authenticated with your project key. Verification is public by design — anyone holding an attestation ID can check it. That is the point.
Register the agents that act for you. Every attestation names its actor; every actor has an owner who answers for it.
Attach the rules an agent acts under — limits, approvers, scope — so any action can be checked against the policy that governed it.
Payment attestations are built from Safaricom's Daraja callbacks (STK push results, C2B confirmations) — telco-signed facts, never screenshots or self-report.
