Why Elpis exists
An authorized payment can still be a mistake. Elpis is built for the space between permission and outcome.
Permission doesn't settle the question
An agent can be allowed to spend money and still pay for something it never received.
Most authorization systems ask whether the action is permitted. Elpis keeps that question, then asks what evidence would make settlement appropriate.
For machine-verifiable work, the buyer and provider can agree on an acceptance condition before work starts. The result can be replayed rather than accepted on trust.
What it does about that
Spending policies limit what can be requested. Committed conditions define the agreed work. Verification records what the evidence supports. Supported escrow mechanisms can then act on an authorized decision.
If required evidence is missing, the safe answer is to hold. If a transaction has already become final, Elpis cannot invent a reversal.
The name
Elpis is the figure of hope remaining in Pandora's jar. We chose the name for a practical reason: when something goes wrong, a system should preserve a useful next action wherever the transaction design allows it.