Operator trial

Put one HTTP action you own behind a Bolyra authorization rule. Attempt it three ways. See the decision, whether a request was dispatched to your endpoint, and the signed receipt, for each.

Use a staging endpoint or a reversible action. Attempt 1 really executes.

Run it

git clone https://github.com/bolyra/bolyra
cd bolyra/examples/operator-trial
npm ci
npm run trial -- --dry-run
cp trial.example.yaml trial.yaml   # your endpoint, method, header, permission
THEIR_TOKEN=... npm run trial -- --config ./trial.yaml

Node 20 or newer, macOS or Linux. About ten minutes once you have endpoint credentials.

What you see

Attempt 1  credential granted WRITE_DATA            -> ALLOW  dispatched: yes  upstream 201  receipt 0x95e24b…
Attempt 2  credential granted READ_DATA only        -> DENY   dispatched: no                 receipt 0x7afa08…
Attempt 3  replay of attempt 1's bundle             -> DENY   dispatched: no                 receipt 0x465d01…

dispatches to your endpoint: 1 / 0 / 0
bundle: trial-out/2026-09-13T19-27-50-571Z/
verify independently:
  npx @bolyra/cli@0.9.0 receipt verify-chain ./receipts.jsonl --signer 0xf0a38d314317ca6a06cb7bcfd9d13405a422f728 --expect-count 3 --expect-head 0xa42d98b359b693e0279efd82ed003474336f1dfde72ec6d242db7c21f150e8cf

What it is, and is not

A controlled demo: credentials are simulated and registered locally; ZK proof verification is disabled. For a reproducible demonstration of registry-enforced revocation at the verifier boundary, see examples/managed-revocation.
It protects traffic routed through the local Bolyra host. It does not stop anyone from calling your endpoint directly.
Receipts verify signed claims and chain integrity against an ephemeral signer. "Dispatched" means the local host invoked the request; delivery and execution at your endpoint are unsigned observations.
Your configured headers and body are sent to your endpoint, and nowhere else. They never enter the bundle. No results are submitted to Bolyra automatically.

If it ran against an endpoint you own, email the bundle directory to hello@bolyra.ai. Full details: examples/operator-trial.