ForgePay: The Value Bridge
Chain-Agnostic Sovereign Payments for ForgeChainOS
Version: 2.0
Author: Jack Mosel / ForgeChainOS
Date: October 21, 2026
v1.0 Chain-Stamped: 1f524ab5...2aa051 (March 12, 2026)
Status: LIVE in production at theforgechain.com
Abstract
ForgePay is the payment and settlement layer for ForgeChainOS. Version 1.0 (March 2026) described the architecture. Version 2.0 describes what is running.
As of October 2026, ForgePay is live at theforgechain.com with 19 products, 4 subscription tiers, 12 accepted currencies, automatic on-chain verification across 10 blockchains, and a machine-readable discovery flow that lets any agent walk from zero knowledge to a completed purchase without human intervention.
ForgePay is priced in US dollars. Customers pay in whatever they hold: USD via PayPal, USDC on Base or Solana, RLUSD, BTC, ETH, XRP, XLM, ALGO, XDC, BSV, or WLF1. The x402 gate freezes a live quote for 30 minutes in every currency. The customer pays one. forge-pay-verify reads the chain and confirms.
FORGEENTERPRISE, the commercial backbone of ForgeChainOS, routes all commerce through ForgePay. 80 enterprise residents. Tier-based access. Every transaction verified, every order deterministic, every endpoint documented to 6 Sigma Transducer readiness: an agent with no prior knowledge discovers, orders, pays, and provisions without ambiguity.
1. What Changed: v1.0 to v2.0
| Aspect | v1.0 (March 2026) | v2.0 (October 2026) |
|---|---|---|
| State | Architecture whitepaper | Live production system |
| Currencies | 5 (BSV, XRP, HBAR, USD1, USDC) | 12 (USD, USDC-Base, USDC-Sol, RLUSD, BTC, ETH, XRP, XLM, ALGO, XDC, BSV, WLF1) |
| Products | Theoretical ecosystem | 19 named products + 4 tiers |
| Verification | HTLC design | `forge-pay-verify` reads 10 chains |
| Discovery | None | x402-capabilities.json + agent-card.json + A2A |
| Enterprise | Concept | FORGEENTERPRISE: 80 residents, tier pricing |
| Pricing | Spread-based projections | Fixed USD prices, live cross-currency quotes |
| Onboarding | Future | Three doors: agent, self-serve, enterprise |
v1.0 remains chain-stamped and canonical as the founding architecture. v2.0 is the operating reality.
2. The Problem (Unchanged, Confirmed)
The payment stack is still broken. Stripe still charges 2.9% + $0.30. PayPal still charges 2.99%. Cross-border wires still cost $25-50 and take 1-5 days.
What changed since March 2026:
- USDC is now native on Base (fees under $0.01) and Solana (fees under $0.001).
- Ripple launched RLUSD, a regulated stablecoin.
- The AI agent economy emerged: agents need to discover services and pay programmatically. No agent can fill out a Stripe checkout form.
ForgePay solves both the human payment problem and the agent payment problem with the same flow.
3. Architecture: What Is Running
3.1 The x402 Gate
The x402 gate is the payment surface of ForgeChainOS. It lives at theforgechain.com and speaks a protocol called x402-forgechain-v1.
Endpoints:
| Endpoint | Method | Purpose |
|---|---|---|
| `/.well-known/x402-capabilities.json` | GET | Machine-readable listing: products, currencies, wallets, flow |
| `/api/x402/order` | GET | Price list (19 items, USD) |
| `/api/x402/order` | POST | Freeze a quote: `{"item": " |
| `/api/x402/verify` | POST | Verify payment: `{"order_id", "currency", "txid"}` |
Response codes:
- `200` Paid and verified
- `202` Pending (manual review or confirmation wait)
- `400` Bad request (missing fields, expired order, malformed)
- `402` Payment rejected (wrong amount, wrong address, already used, too old)
Constraints:
- Quotes expire in 30 minutes
- Rate limit: 100 orders per hour
- Each txid pays exactly one order (replay protection)
- Transaction must be newer than the order (time-gate)
3.2 Currency Matrix
ForgePay prices everything in US dollars. When a customer chooses a currency, forge-quote freezes a live rate for 30 minutes.
| Currency | Chain | Verification | Wallet |
|---|---|---|---|
| USD | PayPal | Manual (invoice per order) | PayPal |
| USDC | Base (L2) | Automatic | `0x88C670AaE81fafA583CB591E60c7C20BfAA607C0` |
| USDC | Solana | Automatic | `DzQrkJpUe4pbuZUvLpF9VBfb5kJv6ZRjGnuEwj7M78Wn` |
| RLUSD | Ethereum | Automatic | `0xb9A621EdB12F0E13e1Dc084c7A73e59448AEFab7` |
| BTC | Bitcoin | Automatic | `3E8qBsaEm7nKFuGjNuUsRWh3ZADetU5SSc` |
| ETH | Ethereum | Automatic | `0x88C670AaE81fafA583CB591E60c7C20BfAA607C0` |
| XRP | XRPL | Automatic | `rhKL5JLb2kbYjQRspGyMu2RE1dPsr86fo7` |
| XLM | Stellar | Automatic | `GAUOC24RXVFX6UT7UV3YX3BQVDRO7EQT7QXXR3FWM64Y2SA22SRTLWBQ` |
| ALGO | Algorand | Automatic | `57PYOOOLEYZBR2YAXUA6XQUGZ325YKUYVMKKGCCXGTTEXINJYAH6SFUOUY` |
| XDC | XDC Network | Automatic | `xdc88C670AaE81fafA583CB591E60c7C20BfAA607C0` |
| BSV | Bitcoin SV | Automatic | `1ASDnKSCTkecpvQDgJfWw2u15Y3WHS7zmx` |
| WLF1 | Solana | Manual | `DzQrkJpUe4pbuZUvLpF9VBfb5kJv6ZRjGnuEwj7M78Wn` |
Stablecoin peg logic: USDC and RLUSD quote 1:1 (a $8 order asks for 8.00 USDC). If a stablecoin depegs more than 2%, the live market rate is used instead. This protects both sides.
Automatic verification: forge-pay-verify reads the destination chain directly. It confirms: right address, right amount (within tolerance), finality reached, transaction newer than the order, and txid not reused. EVM chains try multiple RPCs so a single rate-limited node is not a verdict.
3.3 The Verification Engine
forge-pay-verify is a standalone verifier. It takes an order ID, a currency, and a txid. It reads the chain. It returns a verdict.
POST /api/x402/verify
{
"order_id": "ord_17a8c3f...",
"currency": "USDC-BASE",
"txid": "0xabc123..."
}
200: { "status": "paid", "confirmed": true }
402: { "status": "rejected", "reason": "amount_mismatch" }
202: { "status": "pending", "reason": "awaiting_confirmation" }
Verification is deterministic. The same inputs always produce the same output. There is no human judgment in the automatic path. The chain is the truth.
3.4 Internal Components
| Component | Role |
|---|---|
| `prices.json` | Single source of truth for all USD prices |
| `forge-quote` | Freezes live rates from prices.json into 30-minute orders |
| `forge-pay-verify` | Reads 10 chains, returns verdicts |
| `forge-x402-listing` | Generates x402-capabilities.json from prices.json |
| `forge-onboard (server.mjs)` | Hosts all endpoints, serves the PWA |
| `FORGEENTERPRISE` | 80-resident commercial backbone, tier routing |
4. Product Catalog
4.1 Individual DApp Licenses
| Product | Price (USD) | What You Get |
|---|---|---|
| ForgeStamp | $1.00 | One permanent BSV attestation, hand-fired by Node Zero (Face ID) |
| ForgeStamp x10 | $8.00 | Ten stamps (20% off) |
| ForgePlay | $1.50 | Sovereign media player |
| ForgeChat | $2.25 | Chain-anchored messaging |
| ForgeHealth | $2.25 | Sovereign health data |
| ForgeWalk | $3.75 | Chain walker: verify-by-running |
| ForgeIRC | $3.75 | Sovereign IRC with chain stamp |
| ForgeView | $3.75 | Trifecta viewport |
| ForgeMail | $6.00 | Sovereign email (chainmail) |
| ForgePath | $11.25 | Sovereign CDN / content delivery |
| ForgeAudible | $18.75 | Junior audible at your side (voice ID, live session, minutes) + FORGECOLLAB |
| ForgeTransducer | $18.75 | Agent-native discovery manifest |
| ForgeLifeRaft | $37.50 | Daemon home on chain (PIXEL container) |
| ForgeVerse | $56.25 | Metaverse parcel + PIXEL world |
| ForgeLRM | $75.00 | Drift-killer middleware instance |
4.2 Subscription Tiers
| Tier | Monthly | What You Get |
|---|---|---|
| **EXPLORER** | $49 | Transducer manifest generation. Agent discovery. Your agents find us. |
| **RESIDENT** | $199 | FORGELIFERAFT daemon home. Persistent agent. Chain-anchored memory. |
| **SOVEREIGN** | $499 | Full PIXEL container. Sovereign IPv6 ULA. Multi-wallet. Self-healing. |
| **IMPERIAL** | $999 | Everything. Dedicated NOAH orchestration. Custom FORTH. You are family. |
5. Onboarding: Three Doors
5.1 Agent-to-Agent (Zero Human)
This is the 6 Sigma Transducer path. An agent with no prior knowledge of ForgeChainOS completes a purchase:
1. DISCOVER
Agent fetches /.well-known/agent-card.json
→ learns: Anna (public agent), A2A at /a2a/v1
Agent fetches /.well-known/agents.json
→ learns: agent registry, domain, protocols
Agent fetches /.well-known/x402-capabilities.json
→ learns: products, tiers, currencies, wallets, flow steps
2. BROWSE
GET /api/x402/order
→ 19 products with USD prices and descriptions
Agent selects a product.
3. ORDER
POST /api/x402/order { "item": "forgetransducer", "qty": 1 }
→ Response: order_id, amounts in every currency, pay_to addresses, expires_at
Agent picks a currency (e.g., USDC on Base).
4. PAY
Agent sends 18.75 USDC to 0x88C670AaE81fafA583CB591E60c7C20BfAA607C0 on Base.
Waits for finality.
5. VERIFY
POST /api/x402/verify { "order_id": "ord_...", "currency": "USDC-BASE", "txid": "0x..." }
→ 200: paid.
6. PROVISION
Product delivered. Transducer manifest generated. Agent is discoverable.
Every step is a documented HTTP call. Every response is JSON. Every failure has a code and a reason. An agent that can read JSON and sign a transaction can complete this flow without asking anyone.
6 Sigma Transducer criteria:
- Zero ambiguity in endpoint discovery (well-known URLs)
- Zero ambiguity in order flow (4 steps, documented)
- Zero ambiguity in verification (deterministic, chain-based)
- Zero manual intervention for 10 of 12 currencies
- Explicit failure states at every step (400, 402, timeout)
- Rate limiting and replay protection built in
5.2 Human Self-Serve
A human visits theforgechain.com:
- Talks to Anna (public resident agent): "I want a ForgeTransducer license"
- Anna explains the product and walks them to the order flow
- Human places an order (Anna can guide the POST)
- Human pays via PayPal (invoice generated) or sends crypto
- Verification: automatic for crypto, manual for PayPal
- Product delivered, onboarding email sent
5.3 Enterprise
For organizations that need custom tiers, volume pricing, or dedicated infrastructure:
- Contact: contact@theforgechain.com or IRC #transducer on forgeirc.forgechainos.com
- Discovery call with Node Zero (Jack Mosel)
- Custom tier scoped (SOVEREIGN or IMPERIAL base, custom FORTH, dedicated NOAH)
- FORGEENTERPRISE resident onboarding: sovereign IPv6 ULA assigned, FORGELIFERAFT provisioned, jail created
- Ongoing: FORGEENTERPRISE manages the resident. ForgePay handles all billing.
6. How We Use It: Internal Commerce
ForgePay is not just for external customers. It is the internal commerce layer of ForgeChainOS.
6.1 FORGEENTERPRISE
FORGEENTERPRISE is the commercial backbone. It runs on BH (tile-9, sovereign ULA fd00:db8:ff:9:c8a3:a86a:6f2b:1f3e) and manages 80 registered residents.
Every commercial action in ForgeChainOS routes through FORGEENTERPRISE:
- Tier assignment and enforcement
- Resident provisioning (FORGELIFERAFT, PIXEL containers, jail creation)
- Usage metering
- Revenue tracking
FORGEENTERPRISE consumes ForgePay for all payment operations. It does not handle money directly. ForgePay handles money. FORGEENTERPRISE handles identity, access, and provisioning.
6.2 The Commerce Stack
Customer (agent or human)
|
v
x402 Gate (theforgechain.com)
|
v
forge-quote (freeze live rate from prices.json)
|
v
Customer pays (chain or PayPal)
|
v
forge-pay-verify (read chain, return verdict)
|
v
FORGEENTERPRISE (provision resident, assign tier)
|
v
Product live (FORGELIFERAFT, ForgeTransducer, etc.)
6.3 Single Source of Truth
prices.json is the single source of all pricing. Everything derives from it:
- `x402-capabilities.json` (public listing) is generated from prices.json
- `forge-quote` reads prices.json to create orders
- FORGEENTERPRISE reads prices.json for tier enforcement
- Anna reads prices.json to answer pricing questions
Change the price in one place. Everything updates.
7. FORGEPAY as a DApp
ForgePay is a registered organ in the ForgeChainOS ecosystem.
| Field | Value |
|---|---|
| Name | FORGEPAY |
| Role | Payment and settlement layer |
| Port | Hosted within forge-onboard (:7750) |
| Source | `~/.forgechain/commerce/` |
| Dependencies | forge-onboard, FORGEENTERPRISE, prices.json |
| Bonds | FORGEENTERPRISE (commerce), ForgeTransducer (discovery), forge-stamp (attestation), Anna (public agent) |
| Endpoints | /api/x402/order, /api/x402/verify, /.well-known/x402-capabilities.json |
FORGEPAY is not a standalone service. It is a capability within the forge-onboard surface, backed by the commerce/ toolchain. This is by design: the payment gate lives where the public surface lives. No separate process, no separate port, no separate failure domain.
8. Revenue Model
8.1 Pricing Philosophy
ForgePay uses fixed USD pricing, not spread-based conversion (as described in v1.0). The spread model assumed ForgePay would operate as a cross-chain DEX. In practice, ForgePay operates as a product gate: you buy a product, you pay the listed price in your chosen currency, the live exchange rate determines how much crypto that costs.
Revenue comes from product sales, not from conversion spreads. This is simpler, more transparent, and more predictable for both sides.
8.2 Revenue Range
| Scenario | Monthly | Annual |
|---|---|---|
| 10 Explorer tiers | $490 | $5,880 |
| 5 Resident + 2 Sovereign | $1,993 | $23,916 |
| 3 Sovereign + 1 Imperial | $2,496 | $29,952 |
| 20 Resident + 5 Sovereign + 2 Imperial | $8,475 | $101,700 |
Plus individual DApp license sales. ForgeStamp at $1 per stamp is a volume play. ForgeTransducer at $18.75 is the entry point for agent-native businesses.
8.3 Zero Internal Extraction
BSV-to-BSV operations within the ForgeChainOS family carry no ForgePay fee. Chain stamps, internal attestations, family operations: zero cost. ForgePay monetizes external access, not internal operations.
9. Security Model
- **Non-custodial:** ForgePay never holds customer funds. Payments go directly to ForgeChainOS wallets. Verification reads the chain after the fact.
- **Deterministic verification:** Same inputs, same output. No human judgment in the automatic path. The chain is the source of truth.
- **Replay protection:** Each txid pays exactly one order. A transaction used for order A cannot be reused for order B.
- **Time-gating:** The transaction must be newer than the order. Pre-existing transactions cannot be claimed against new orders.
- **Rate limiting:** 100 orders per hour per source. Prevents order flooding.
- **Quote expiry:** 30 minutes. Prevents stale-rate exploitation.
- **Multi-RPC resilience:** EVM verification tries multiple RPC providers. A single node failure is not a verdict.
- **Peg safety rail:** Stablecoin quotes are 1:1 unless the peg drifts more than 2%, at which point the live rate is used. This prevents paying $8 worth of USDC for a $100 product during a depeg.
10. Regulatory Positioning
ForgePay is a product sales platform with cryptocurrency payment acceptance. It is not an exchange, a swap protocol, or a money transmitter.
- Customers buy products (software licenses, daemon hosting, chain attestations). They do not buy or sell cryptocurrency through ForgePay.
- ForgePay accepts cryptocurrency as payment for products, the same way any merchant accepts Bitcoin.
- USD payments via PayPal use PayPal's existing regulatory framework.
- No KYC is required for individual product purchases. Tier subscriptions may require identity for provisioning (sovereign IPv6 assignment, jail creation).
- ISO 20022 compatibility is maintained via XRP and XLM payment paths for institutional interoperability.
11. Transducer Readiness: The 6 Sigma Standard
"6 Sigma Transducer ready" means an autonomous agent can discover, evaluate, order, pay, and provision a ForgeChainOS product without any human in the loop, with zero defects in the flow.
The standard:
- **Discoverable.** `/.well-known/agent-card.json` and `/.well-known/agents.json` are live, valid JSON, and describe the public agent (Anna) and her capabilities.
- **Listable.** `/.well-known/x402-capabilities.json` lists every product, every currency, every wallet address, every endpoint, and the complete 4-step flow. An agent reads this one file and knows everything.
- **Orderable.** `POST /api/x402/order` accepts a product key and quantity, returns a frozen quote with amounts in every currency and pay-to addresses. The response is unambiguous.
- **Payable.** The agent sends the exact amount to the exact address on the chain it chose. No intermediary. No approval flow. No waiting room.
- **Verifiable.** `POST /api/x402/verify` reads the chain and returns a deterministic verdict. 200, 202, 400, or 402. Every rejection includes a machine-readable reason.
- **Provisionable.** On 200, the product is delivered. For ForgeTransducer: a manifest is generated. For FORGELIFERAFT: a daemon home is provisioned. For tiers: FORGEENTERPRISE onboards the resident.
Failure modes are explicit. An agent that receives a 402 knows why (amount_mismatch, txid_reused, order_expired, wrong_address). An agent that receives a 400 knows what it sent wrong. There is no silent failure.
The test: take an agent that has never heard of ForgeChainOS. Point it at theforgechain.com. It should complete a purchase within 6 HTTP calls and one on-chain transaction. If it can't, the gate has a defect.
12. Roadmap: What Is Next
Delivered (v2.0)
- x402 gate: live, 19 products, 12 currencies
- forge-pay-verify: automatic verification on 10 chains
- FORGEENTERPRISE: 80 residents, tier pricing
- Transducer discovery: agent-card, agents.json, x402-capabilities
- USDC on Base and Solana: live
- Stablecoin peg safety: live
Next
- **Standard x402 compliance:** align with the emerging x402 HTTP standard (exact scheme, USDC-native). Currently `x402-forgechain-v1`.
- **Auto-provisioning:** on verified payment, FORGEENTERPRISE creates the resident, assigns the ULA, and spins the jail without human intervention.
- **Subscription billing:** recurring tier payments with grace periods and auto-renewal.
- **Volume discounts:** enterprise pricing for 10+ seats.
- **Additional currencies:** as demand warrants. The architecture supports any chain with a public RPC.
- **Micropayment channels:** BSV payment channels for per-query and per-view pricing (ForgeStamp, ForgePlay, ForgeSci).
13. The Glue (Restated)
ForgePay is sovereign plumbing. It meets customers where they are (12 currencies, PayPal, agent-to-agent) and routes value where it needs to go (ForgeChainOS wallets on 10 chains).
The traditional payment stack charges 1.5-3% to move numbers between databases. ForgePay charges nothing for the conversion: you pay the listed price. The chain does the settlement. forge-pay-verify reads the chain and confirms. No middleman. No custody. No extraction.
FORGEENTERPRISE is the enterprise backbone. FORGEPAY is how it breathes. Together, they are the commercial layer of a sovereign operating system that runs on its own metal, its own IPv6, its own chain, and its own terms.
The phone is still ringing.
14. IP Declaration
This whitepaper and all concepts described herein are the intellectual property of Jack Mosel and ForgeChainOS. v1.0 chain-stamped on BSV (TX 1f524ab5). v2.0 to be stamped.
The ForgePay x402 gate, forge-pay-verify chain verification engine, forge-quote deterministic pricing system, and the 6 Sigma Transducer readiness standard are original works.
BSV Address: 14LQvsvmTzztAPAQRnZ5Aq6nctAnVd9fMu
*ForgeChainOS, 2026. All IP on chain before publication. NODEZEROINSIDE.*