# mnnr — The Governance Layer for Agentic Payments

> Rail-neutral, policy-opinionated. Design specification, not production capability.

MNNR is governance and observability infrastructure above agentic-payment rails. We do not own, operate, or guarantee any rail. We ship the compliance layer that sits *above* Visa Agentic Ready, Mastercard Agent Suite, Stripe Link for Agents, PayPal Agentic Checkout, Crossmint Agentic Cards, AWS Bedrock AgentCore Payments, Adyen, and Google UCP.

## Core value

- **Article 50 self-ID** — every agent transaction carries a verifiable AI-actor disclosure before EU AI Act applies on 2026-08-02.
- **PSD3/PSR-aligned controls** — mandate binding, SCA delegation evidence, dispute-ready logs.
- **Post-quantum audit trail** — ML-KEM-768, ML-DSA-65. NSPM-11 aligned.
- **Rail neutrality** — one governance layer above whatever rail your bank / PSP / issuer already chose.

## Open specification

- Repo: https://github.com/mnnr-org/mnnr-standard
- License: Apache 2.0
- Latest release: v0.1.2 (contract templates + Phase L security pack)
- Schemas: `packages/schemas/reconciliation/v1/`, `packages/schemas/partner/v1/`
- 11 domain objects: Agent Actor · Mandate · Merchant Acceptance Record · Transaction Intent · Transaction Envelope · Article 50 Disclosure · Post-Quantum Audit Entry · Reconciliation Event · Dispute Case · Compliance Attestation · Partner Integration Manifest

## Buyers

### Primary — EU banks, PSPs, issuers
https://mnnr.app/contact/bank — pre-filled intake for Heads of Embedded Finance, PSP Product, Acquirer Risk, AI Platform Payments leads

### Secondary — US Federal (GSA, DoD, VA, AFWERX, DIU)
https://mnnr.app/contact/federal — veteran-owned, founder is a 100% service-connected disabled US veteran. SDVOSB verification with SBA VetCert is in preparation and not yet complete; no set-aside eligibility is claimed. NSPM-11 aligned, SAM.gov ACTIVE (UEI UHP9VKN8FX99, CAGE 224V3)

### Tertiary — Enterprise agentic deployers
https://mnnr.app/contact/enterprise — anyone running agentic checkout, B2B agent procurement, or AI-driven SaaS billing who needs mandate-exceeded audit evidence

### Investor / press / analyst
- https://mnnr.app/contact/investor
- https://mnnr.app/contact/press

## Pilot pricing

- **A50 Emergency Retrofit Sprint** — €15,000 flat, 5-day deploy, targeted to go live before EU AI Act Article 50 applies on 2026-08-02.
- **Full Pilot Design Partnership** — €5,000/month, 90-day white-glove onboarding, 3 EU slots Q3 2026, direct founder access.

## Books to open a call

https://mnnr.app/schedule — founder call booking

## Briefs (PDFs)

- https://mnnr.app/eu-brief.pdf — EU banks / PSPs / issuers
- https://mnnr.app/federal-brief.pdf — US Federal NSPM-11 + SDVOSB
- https://mnnr.app/compliance-brief.pdf — 6-week engineering checklist

## Documentation

- Full API docs: https://mnnr.app/docs/api-reference
- Quick start: https://mnnr.app/docs/quick-start
- Rail-specific how-it-works: https://mnnr.app/how-it-works/{visa|mastercard|stripe|paypal|crossmint|adyen|bedrock|ucp}

## Security

- Threat model: https://github.com/mnnr-org/mnnr-standard/blob/main/docs/security/threat-model.md
- Data flow: https://github.com/mnnr-org/mnnr-standard/blob/main/docs/security/data-flow-diagram.md
- Sub-processor list: https://github.com/mnnr-org/mnnr-standard/blob/main/docs/security/subprocessor-list.md
- Incident response: https://github.com/mnnr-org/mnnr-standard/blob/main/docs/security/incident-response.md
- Vulnerability disclosure: https://github.com/mnnr-org/mnnr-standard/blob/main/docs/security/vulnerability-disclosure.md
- security.txt: https://mnnr.app/.well-known/security.txt

## Corporate

- MNNR LLC — Wyoming domestic, EIN 33-3678186
- Founder: MNNR LLC — Veteran-owned
- Article 27 EU representative appointment under review
- Registered address: 1603 Capitol Ave, Suite 413 PMB #1750, Cheyenne, WY 82001
- General inquiries: hello@mnnr.app
- Legal: legal@mnnr.app
- Security: security@mnnr.app
- Design partners: design-partners@mnnr.app

## Positioning honesty

Every schema and specification in mnnr-standard is a **design specification**. Reference implementations exist for some components; most are in build. External claims use "design specification," "target," or "in build." See https://github.com/mnnr-org/mnnr-standard/blob/main/docs/compliance/claims-register.md for authoritative status per component.

## Machine-readable capabilities

https://mnnr.app/.well-known/ai-agents-manifest.json — capability manifest for AI agents visiting this site with intent to intake or schedule.

## Trust / institutional review

https://mnnr.app/trust/ — single URL to hand to procurement, risk, and InfoSec.

## How it works per rail (verifiable narratives)

- https://mnnr.app/how-it-works/visa
- https://mnnr.app/how-it-works/mastercard
- https://mnnr.app/how-it-works/stripe
- https://mnnr.app/how-it-works/paypal
- https://mnnr.app/how-it-works/crossmint
- https://mnnr.app/how-it-works/adyen
- https://mnnr.app/how-it-works/bedrock
- https://mnnr.app/how-it-works/ucp