Agentic Commerce: Authorize, Gate, and Resolve

An agent purchase runs through risk checks to authorize, step up, or block; disputes resolve against the signed mandate chain

Agentic Commerce: Authorize, Gate, and Resolve An agent purchase runs through risk checks to authorize, step up, or block; disputes resolve against the signed mandate chain 01 / Buyer + Disputes 02 / Shopping Agent 03 / Risk Engine EX / Step-up + Block 05 / Merchant + Payment 06 / Mandate Audit Chain Intent Evaluate + gate Settle + resolve Consent or stop Buyer Mandate · signed intent · Buyer + Disputes › Intent Buyer Mandate signed intent Shopping Agent · assembles cart · Shopping Agent › Intent Shopping Agent assembles cart Risk Checks · id, scope, injection · Risk Engine › Evaluate + gate · policy Risk Checks id, scope, injection policy Step-up · human approves · Step-up + Block › Consent or stop › Evaluate + gate Step-up human approves Block · fraud / injection · Step-up + Block › Consent or stop › Settle + resolve Block fraud / injection Authorize · delegated cred · Merchant + Payment › Evaluate + gate Authorize delegated cred Settle · goods shipped · Merchant + Payment › Settle + resolve Settle goods shipped Mandate Chain · signed VCs · Mandate Audit Chain › Evaluate + gate Mandate Chain signed VCs Dispute · 'my agent did it' · Buyer + Disputes › Settle + resolve Dispute 'my agent did it' Resolve · vs. chain · Mandate Audit Chain › Settle + resolve Resolve vs. chain pass high value consent injection / fraud log chargeback evidence? query chain Legend User UI Agent logic Policy Tool action Context / trace

New Fraud Surface

  • • Prompt injection turns merchant content into commands
  • • Delegated payment credentials are a prime target
  • • Bugs and hallucination exceed the buyer's real intent

Gates, Not Guesses

  • • Verify agent identity and delegation scope first
  • • Detect injection before tools spend money
  • • High-risk actions step up to a human

The Chain Is Evidence

  • • Each step signs a verifiable credential
  • • Disputes resolve against what was authorized
  • • Liability follows the signature, not the story

Workflow diagram • Built with Archify • Create yours ↗ • Hover to trace • R route • Click to focus • +/− zoom • M radar • [/] views • P play story • T theme • E export