Xahau skill for Muse

# xahau-muse-skill

Let your Muse move XAH and use Xahau apps — with you approving every
transaction on your phone.

This skill lets an AI assistant (Muse, or any agent with a terminal)
interact with the **Xahau network**: send payments, manage trustlines,
mint URITokens, claim the monthly XAH reward, and check out on xMerch
storefronts. It was built so a non-technical owner can hand their Muse
a wallet task and stay in control.

## The safety model

Nothing moves until you tap approve on your phone in the Xaman app —
the skill can only propose transactions, never sign them. Your spending
policy (which network, how much per transaction, which destinations) is
enforced by the software before any sign request is created, and an
empty destination list means no payments at all. Every proposal is
sealed with a cryptographic hash, so anything changed after you review
it is rejected automatically.

There is **no seed and no private key anywhere in this skill, ever.**

## Install

macOS / Linux:

```bash
git clone https://github.com/terramike/xahau-muse-skill
cd xahau-muse-skill
./install.sh
```

The installer checks Python, installs what's needed (using a private
environment when your system requires it), puts `xahau`,
`xahau-payload`, and `xmerch` on your PATH, and runs the test suite as
a self-check. Re-running it is always safe.

Windows (PowerShell) — three manual steps:

```powershell
git clone https://github.com/terramike/xahau-muse-skill
cd xahau-muse-skill
pip install -r requirements.txt
python bin/xahau --help   # sanity check
```

Then use `python bin/xahau`, `python bin/xahau-payload`, `python bin/xmerch`
in place of the bare commands below.

## Your first payment (testnet — free, safe)

```bash
xahau setup --address rYOURADDRESS --network xahau-testnet
xahau init-policy
```

Open `~/.xahau/policy.json` and add a second address you control to
`destination_allowlist` (testnet starts locked: empty = no payments).
Fund both addresses at the [testnet faucet](https://test.xahauexplorer.com/faucet)
(a second account in Xaman works fine — payments to yourself are
rejected by the ledger as redundant), then:

```bash
export XAMAN_API_KEY=… XAMAN_API_SECRET=…   # your own Xaman dev-console app
xahau send --to rSECONDADDRESS --amount 0.1 --ccy XAH   # review the proposal!
xahau-payload send --hash <proposal-hash>              # approve the tap in Xaman
```

Read th