← All Projects

Agentic Auction Portal for Certified Coins

Collectors bid on certified coins online while AI agents check certificates, describe lots and flag suspicious bidding, and staff release every payout.

Agentic Auction Portal for Certified Coins

An online auction for certified coins and banknotes in Singapore, with a public website, a bidding app for collectors and staff screens for intake, trust and safety, compliance and settlement. Agents check certificates, draft lot descriptions, price lots, flag suspicious bidding and draft invoices. People approve every listing, decide every held bid and release every payout. The bidding screens were designed for older collectors, with large text by default and plain words.

Certified coin auctions carry three risks at once: counterfeit or misdescribed items, shill bidding, and anti-money-laundering duties on high-value cash and card payments. A small auction house has to manage all three while keeping the experience simple for collectors, many of whom are older.

The system covers the full journey from consignment to settlement. Bidding rules, fees, GST and the soft close are written as plain calculations and tested against 10,000 random bid sequences. Agents treat consignor text as untrusted data. Trust rules can hold a bid but never cancel one, and consignors are paid only when every payout gate is clear.

The system runs a live timed sale with a simulated room, a public website in front of it, and an end-to-end script of 40 checks. Its seeded test cases cover a prompt injection in a consignor note, a counterfeit holder, a certificate changed before close, a bidder linked to a consignor and cash payments split to avoid reporting. Each is caught and routed to a person.

Status
Working system
Client
Confidential

Built to the Governed Cognitive Layer: the model reads and drafts, deterministic checks decide what it may do, and a named person approves anything that commits the business.

Mid-market takeaway

Let automated checks hold a suspicious bid or payment, and leave the decision to cancel with a person. A machine that can only pause cannot wrongly take a win from a genuine collector. Write bid increments, fees and payout conditions as tested code, so the agent can explain them but cannot bend them.

Working system

Concept paper, C-suite deck and live demo

The concept paper, the C-suite deck, the public website and the working bidding app sit behind a password. I walk owners through it live.

●Live demo (on request) →

The same design rules behind this build, applied to your business in half a day.

Book the WorkshopDiscuss a build like this

Screens from the system

Lot page showing a gold coin, the current bid, a countdown and the all-in price including premium and GST
Collectors see the all-in price, fees included, before they bid.
Trust and safety screen with two held bids, release and void buttons, and an account graph linking a bidder to a consignor
Suspicious bids are held for an officer to release or void. No machine cancels a bid.
Settlement screen showing an invoice, consignor payout gates and an incident note about split cashier's orders
Consignors are paid only when every payout gate is clear.

Demo data throughout. Customer names, accounts and payees are fictional.

Terence Kok
Before You Go

My first version was built for staff and for me. Then I was reminded that this is a consumer portal and many bidders are senior. That changed the design more than any agent did. Text is now large by default, the public screens use plain words, there is a My bids page that says outbid or winning in one line, and a Help page that offers a call back. Governance is wasted if the customer cannot read the screen.

Terence Kok