Nothing in this journey asks you to trust us. Each step grants less authority than you feared and leaves more evidence than you expected — and you can stop at any rung and keep everything the previous one proved.
Your agents already spend — through cards, saved suppliers, subscriptions, marketplaces. We connect Unija in Watch Mode: nothing changes in how you operate, no authority is granted. Unija simply writes the ledger of what it would have decided under a draft mandate. In two weeks you read that ledger together with us — and usually discover spending nobody had said yes to.
Watch ModeWith your advisor you write the mandate: which counterparties, what purposes, how much per period and currency, above which amount a human signs. It is committed as a hash-addressed record with an effective window — changing it later is a new record, never an edit, and an AI can never issue or expand its own mandate. From this moment "who said it could" has an answer with a date on it.
The firewall goes live in Agent-Side Hold: release is held on your side, so no bank integration is needed to start. Only an ALLOW passes; everything else waits or stops. You watch budgets drain in daylight, per mandate and per period — and the first time the gate blocks something you did not expect, you will know exactly why, in reason codes written to be read months later.
Agent-Side HoldApprovals land on your phone with their own expiry. One glance: co-sign with a touch, or let it lapse — waiting is a legitimate state, never an error. The Wallet holds authority, never funds; your money stays at your bank. Every act — approval, decline, even silence — becomes a receipt.
When you are ready, your bank holds release until Unija's word arrives. This is not a slide: the path is proven on a live bank sandbox — allowed cases executed with real transaction identifiers, blocked cases never reached the rail, and a deliberately replayed decision was refused by the bank's own systems, because the payment instruction is derived from the decision itself.
Bank HoldHand your auditor the evidence bundles. They verify every decision offline, alone, without asking us anything — and if anyone has altered anything, verification fails with named errors. The question that opened this journey — who said it could? — now has the same answer no matter who asks, or when.