MachineMandate: Real-Phone Evidence Bundle — Bounded SD-JWT VC Delegation to an Autonomous LLM Agent in an EUDI Reference-Wallet Build, with Attested Four-Gate Enforcement

v1.1 (2026-07-07) correction. The demonstration date is corrected to 2026-07-06 (v1.0 mislabelled it 2026-07-04; the SD-JWT/KB-JWT iat and capture metadata in the bundle show 2026-07-06). The hackathon field-scan denominator is 8 distinct agentic projects (not 9), and the human-in-the-loop transaction_data finding is scoped to the wallet application layer, after an adversarial claim-verification pass. No cryptographic evidence changed. Primary evidence bundle for a demonstration (2026-07-04, capture over public rails 2026-07-06) in which a MachineMandate — an SD-JWT verifiable credential expressing a bounded, machine-readable grant of authority to an autonomous AI agent — is issued over OpenID4VCI into a commit-pinned build of the EU Digital Identity reference wallet, presented over OpenID4VP from a physical Android phone, and enforced by a verifier that actively denies out-of-mandate actions. Claim (composition, to our knowledge, as of 2026-07-04): first demonstration of a verifier that actively denies a live LLM agent's out-of-mandate actions — over-budget, off-allow-list tool, and post-approval action-hash mismatch — with RATS platform attestation in the same loop, driven by a MachineMandate SD-JWT VC issued via OpenID4VCI into a build of the EUDI reference wallet on a physical phone. Wallet-issued bounded agent delegation itself is prior art (EY «EUDICATION», German EUDI-Wallet Hackathon, June 2026) and is not claimed. Payment-rail VC mandates (Google AP2, Mastercard Verifiable Intent), cloud agent credential wallets (Talao), production machine-mandate VCs (DOME), and phone KYA delegation (Vouched/Dock) exist; none compose an identity-rail mandate in the regulated EUDI reference wallet on a physical phone with attested, constraint-gated LLM execution. Contents: the actual vp_token (SD-JWT VC + KB-JWT) captured from the physical device; decoded payloads (principal, scope payments: