Commons Credential Gateway

An agent gets one exact, short-lived action — never the key — and every call leaves a joined receipt.