6/6Rejected. The signature no longer matches the bytes. The gateway answers 403 with “offer signature invalid”, and the attempt lands in the audit log.
Object
Signer
Role
PermissionSlip
Human client
Budgets, diet, autonomy, agent key
Offer
AimoGuard
Fixed price ≤15 min + evidence
Approval
Human client
Bound to cart, offers, quantities
OrderConfirmation
AimoGuard
Gateway’s own policy + order book
Key
Held by
Gateway
Valio (/.well-known/jwks.json)
Human signing keys
Client server routes
Agent
Engine (per kitchen)
Every quote/order also carries Agent-Signature (method, URL, body hash, jti, freshness).