The Protocol War for Agentic Commerce

## The Shadow Economy Beneath the Click

[A] "So right now, just beneath the surface of the internet, there's this massive shadow economy operating."

[B] "Oh absolutely. And we are talking about software aggressively negotiating, evaluating these really complex contracts, and buying services from other software. And it's doing this thousands of times a second. And human beings are just completely locked out of the process."

[A] "Yeah. And the crazy part is that the entire architecture we rely on, you know, to understand commercial reality, it's just fundamentally blind to this activity. I mean, we spent the last 30 years building e-commerce around this one single undisputed artifact, right? The click."

[B] "Exactly. A human being making a conscious choice and clicking a button. And when you pause to think about it, that single click is actually carrying an unbelievable amount of weight."

[A] "Oh, it carries everything. Especially for those of you listening who are operating in, say, high-trust business cultures like the Nordic markets, where corporate governance is really built on these flat hierarchies and just a foundational assumption of transparency."

[B] "Exactly. We assume that if an action was taken, a responsible human was sitting right there behind the screen. Because that click proves intent, it verifies that the buyer understands the price, and it immediately establishes who is legally liable if, say, a shipment goes missing or a contract is breached."

[A] "Yeah, it's like the click acts as this highly compressed bundle of liability and identity."

[B] "A bundle. I like that. Yeah, because behind that simple action a massive amount of infrastructure just fires off instantly. You have a payment processor requesting authorization. You have a banking network assessing whether the transaction matches known human behavioral patterns, you know, to check for fraud. And simultaneously the merchant assumes the burden of actually fulfilling that order and absorbing the cost of returns. So everyone in this ecosystem just agrees on the shape of the evidence simply because a human was physically present at the keyboard."

[A] "It's like an online version of a physical handshake at a cash register."

[B] "That's a great way to put it. It's the undisputed glue of the commercial contract."

## The Unbundling: Six Layers of War

[B] "But the research we're tearing into today, these notes on the protocol war for agentic commerce based on insights from Nate Herk, it shows that this clean, visible system is just completely shattering."

[A] "It really is. We are entering the era of agentic commerce where AI agents are authorized to act, and crucially, to spend on our behalf. And what's fascinating here is that when you remove the human from the screen, that highly compressed bundle of liability, it explodes. It just blows up."

[B] "Literally. The responsibility that was neatly hidden inside the human click is currently being unbundled into six distinct, heavily contested layers."

[A] "Right. And because there is no human present to automatically absorb all that legal and financial friction, this unbundling is forcing a level of explicit, cryptographic clarity that internet commerce has just historically avoided."

[B] "Okay, so we have these six layers, which are effectively six multi-trillion dollar battlegrounds where the biggest tech platforms on earth are just fighting to rebuild the global economy. That's the stakes here."

## Layer 1: Discovery — ACP vs UCP

[A] "Yeah. So let's look at the very front door of this new system. Layer one: discovery. The front lines. Because if I'm a listener running a retail brand or managing a B2B logistics firm, my entire commercial strategy assumes a human is browsing my catalog. They're absorbing my brand story. They're making a conscious choice. And that assumption is basically the first casualty of this shift."

[B] "We're looking at a clash between two entirely different visions for how a purchase even begins."

[A] "Okay, unpack that for me."

[B] "Well, on one side you have the Agentic Commerce Protocol, or ACP. And this is the framework being championed by OpenAI and Stripe. And from what I read, the user experience for ACP seems almost dangerously frictionless."

[A] "Oh, it's incredibly smooth. Too smooth, maybe. Imagine I'm in ChatGPT. I tell it I need a new ergonomic office chair for my home office in Copenhagen. The AI evaluates my prompt, selects a chair from a supported merchant, and just executes the payment directly inside the chat window."

[B] "Exactly. You never leave the chat."

[A] "I never see the furniture company's website. I never see their promotional banners or their carefully crafted brand aesthetic."

[B] "Nope. Stripe handles the payment routing entirely in the dark. And OpenAI completely owns the interface where the discovery happens. And the merchant is technically still the merchant of record, meaning they carry all the real-world risk. They have to put the physical chair in a box and ship it."

[A] "Yeah, and handle the angry customer if a wheel breaks off in six months."

[B] "Okay, let me push back on this vulnerability for a second. If OpenAI controls the chat interface, can't the merchant just aggressively outspend their competitors to buy ad space inside ChatGPT? Like Google AdWords? You just pay to ensure your chair is the one the AI recommends."

[A] "So that fundamental misunderstanding right there is why so many brands are about to lose their margins. Because a large language model is not rendering an HTML page with designated auctionable ad slots. No, it generates responses based on vector embeddings and semantic weighting. So if an agent is optimizing purely for the user's specific parameters, say price, lumbar support, dimensions, and immediate availability, traditional advertising inventory just doesn't exist in that flow."

[B] "Wow. So the brand is completely neutered. You are stripped of your ability to build any kind of loyalty, and you just become this silent, interchangeable logistics provider for an AI that has, what, 900 million weekly users."

[A] "Exactly. The existential threat to the merchant is profound. If an agent only knows how to execute a payment, the merchant loses their entire business model."

[B] "Which sounds like a nightmare for any business leader listening right now."

[A] "It is. But this is where the counter-offensive comes in."

[B] "Okay. The defense."

[A] "Right. The Universal Commerce Protocol, or UCP. And this is Shopify and Google. UCP should be viewed as the merchant's ultimate defense strategy."

[B] "So how does UCP physically alter that interaction? How does it actually force the AI to care about my business rules?"

[A] "Well, it requires the AI to ingest and solve a complex logic puzzle before it is even allowed to execute the transaction."

[B] "A logic puzzle?"

[A] "Yeah. Because real commerce isn't just moving a digital dollar from point A to point B. It's messy. So UCP mandates that the agent must natively understand variants, like does the buyer want the black mesh or the gray leather? It forces the agent to query live inventory databases, calculate dynamic regional taxes, apply volume discounts, and navigate highly specific shipping restrictions."

[B] "Okay, that makes a lot of sense. Like if I'm an enterprise IT director buying 50 laptops, there are strict warranty requirements and preferred vendor discounts that my company has probably spent months negotiating. A basic chatbot that just says 'hey, I found laptops and bought them,' that actively damages my procurement strategy."

[A] "Exactly. The distinction UCP introduces is that an AI cannot merely be a buyer. It must be a fully compliant participant in the merchant's economic reality. If the AI cannot process, say, a JSON file containing the merchant's loyalty program rules and return policies, the transaction is just rejected at the protocol level."

## Layer 2: The Trust Gap — AP2 Mandates

[B] "Wow. Okay, so UCP might protect the merchant's business logic, but that immediately introduces a much darker problem in my mind. Which is, let's say the agent finds the right product and the merchant's API accepts the terms. How does the bank or the merchant actually know the AI had the authority to spend my money in the first place?"

[A] "And this pulls us right into layers two and three of the battleground. The trust gap and authorization. Because moving money is simply database math. Proving that the money should have moved is an entirely different engineering challenge."

[B] "The source material uses this brilliant scenario. The $300 hotel problem."

[A] "Oh, this is a great example. So you tell your AI assistant to book a hotel near an upcoming industry conference, and you set a hard parameter: it must be under $300 a night. The agent scours the internet, balances the check-in times against your flight schedule, factors in local taxes, and it finds a room for $290. Perfect. And it books it."

[B] "Perfectly executing your prompt."

[A] "But it booked a strictly non-refundable room. Technically it honored my mathematical constraint, but practically it totally violated my intent. Anyone who travels for business knows schedules change, flights get canceled. You never ever book a non-refundable room for a volatile conference trip."

[B] "So the system operated flawlessly, but the outcome was disastrous. Who eats that $290?"

[A] "And that is the trillion-dollar question. Legal frameworks regarding digital liability are deeply unresolved here."

[B] "Wait, but isn't this just a corporate credit card problem? Like giving an incredibly fast, slightly over-eager intern a company card?"

[A] "That's a good analogy, but here's the issue: a corporate rule book is an after-the-fact mechanism. It doesn't physically stop the transaction from happening. It just punishes the intern later. What Google is building with AP2, the Agent Payments Protocol, is an active preventative architecture."

[B] "AP2 generates what they call a mandate. What is a mandate, mechanically speaking?"

[A] "Think of it as a highly specific, self-destructing smart contract. Or like a digital power of attorney. It is cryptographic proof, signed by the human's private key. The mandate explicitly defines the boundaries: this agent is authorized to spend up to $300, only on hospitality merchants, and the transaction must include a refundable parameter."

[B] "Oh wow. So the agent literally carries this cryptographic token to the hotel server?"

[A] "Exactly. It hands over the token, and the server verifies the signature. And if the agent attempts to alter the parameters to buy a non-refundable room, the cryptographic hash breaks and the hotel server instantly rejects the connection."

[B] "The mandate proves intent and boundaries without requiring the human to be awake or online. That's incredible."

## Layer 3: The Credential Battle — Visa, Mastercard, PayPal

[B] "But even with a perfect mandate, the agent still needs an actual financial rail to settle the funds. The money still has to move."

[A] "And this is layer 3: the credential battle. This is where traditional financial Titans are fighting for their survival."

[B] "You would assume Visa, MasterCard, and PayPal are completely terrified of this. If Google, OpenAI, and Shopify are building all these new protocols, the old credit card networks seem entirely obsolete."

[A] "A lot of people think that, but that assumes the primary value of a credit card is just the plastic or the simple routing of funds. The reality is actually much more entrenched. Visa and MasterCard possess the one thing that purely technical protocols lack: decades of established, globally recognized dispute resolution frameworks."

[B] "Ah, the chargeback system."

[A] "Exactly. Global commerce relies heavily on the assurance that if fraud occurs, a massive institution is going to step in and make the victim whole. So MasterCard is rolling out Agent Pay and Visa is developing Intelligent Commerce. They are essentially registering the agents themselves, assigning them tokenized credentials so the underlying corporate bank account is never exposed to the merchant's server."

[B] "So they're betting that no matter how sophisticated the AI gets, massive enterprises are never gonna let an AI transact unless there is a throat to choke when it inevitably buys the wrong thing. Especially in highly regulated European markets."

[A] "They are providing the ultimate insurance layer. Consumer and standard enterprise agentic commerce will likely remain on these traditional rails purely because human beings demand the psychological safety of a chargeback."

## Layer 4: The Machine Economy — Stablecoins and x402

[B] "Okay, but Visa's architecture has a fatal flaw here, doesn't it?"

[A] "Oh, a massive one. Because Visa works perfectly for a $300 hotel room. But what happens when an AI doesn't want a $300 room but instead wants a $0.03 API call?"

[B] "This forces us directly into layer 4: the machine economy. And this is where things get really wild. Because traditional financial rails violently collapse under the math of the machine economy."

[A] "A credit card processor typically charges 30 cents plus roughly 3% of the total transaction. So if an autonomous coding agent realizes it needs to rent a specialized debugging algorithm for four seconds, and the cost of that is a fraction of a penny, Visa's base fee of 30 cents instantly bankrupts the entire operation."

[B] "The unit economics makes zero sense. And furthermore, the latency of traditional banking is just incompatible with machine speed. Imagine an AI logistics manager is rerouting a fleet of delivery trucks in real time. It needs to buy hyperlocal weather data from a sensor network to avoid a storm. It cannot wait three days for an ACH transfer to clear."

[A] "And this is where we leave traditional finance behind entirely and enter the world of stablecoins. Just for context: stablecoins are digital tokens that track a fiat currency, usually the US dollar. But they operate on blockchain rails instead of traditional banking mainframes. And their utility here is purely pragmatic. This isn't about crypto speculation. It's just utility."

[B] "They offer programmatic money for programmatic actors."

[A] "I like that phrase. Because an AI doesn't have a social security number or a bank account. But it can effortlessly hold a cryptographic wallet. It can execute a smart contract. And it can stream fractions of a cent continuously as it consumes a digital service."

[B] "And this leads to an absolutely fascinating architectural resurrection. The 402 code."

[A] "Yes. HTTP 402. When the original engineers were drafting the foundational codes of the internet, the same system that gives us HTTP 404 for a missing page or HTTP 200 for a successful connection, they actually baked HTTP 402 into the bedrock. It stands for 'payment required.' They knew, decades ago, that eventually the browser itself would need a native way to handle transactions. But the banking systems of the 1990s couldn't interface with it. So it just sat dormant for 30 years."

[B] "And now Coinbase has revived it with the x402 protocol. They turned an obsolete error code into a massive functioning payment layer for AI."

[A] "In an x402 flow, an AI agent pings a server to request a resource. The server fires back an HTTP 402 status, but embedded inside that header is a machine-readable invoice and a digital wallet address. The agent instantly reads the invoice, verifies that the cost falls within its authorized parameters, and fires a stablecoin payment across a high-speed network like Base or Solana in milliseconds. The receiving server instantly verifies the blockchain state, confirms receipt, and returns HTTP 200, granting access to the data."

[B] "And the human never saw a thing. The entire handshake, payment, delivery cycle happens in a few hundred milliseconds. And the source highlights that over 119 million transactions have already been processed through this architecture."

[A] "This shadow economy is not theoretical. It is actively scaling right now."

## Layer 5: Enterprise Governance — AWS Bedrock AgentCore

[B] "Which exposes a pretty terrifying reality for corporate leadership. If I am the CIO of a mid-sized logistics firm and I suddenly have thousands of employees deploying AI agents, and these agents can autonomously stream stablecoins to buy APIs or use tokenized Visa credentials to procure software, how do I govern this?"

[A] "It's a huge problem. The instinct for most IT professionals is to rely on traditional identity and access management frameworks. But IAM only tells you who logged in. It doesn't govern autonomous logic. An agent isn't just executing a single command. It is reasoning. It's breaking a task down into subtasks, querying internal company databases, calling external tools, and evaluating responses."

[B] "A traditional payment provider like Stripe only sees the final node of that entire journey. The dollar amount and the time stamp. If a massive compliance breach happens, Stripe can only confirm that the money left the building. They can't tell the auditors why."

[A] "And this is why the true battle for enterprise dominance is over the runtime environment. Look at Amazon Web Services and their launch of Bedrock AgentCore Payments. AWS doesn't actually want to fight Google over mandates or battle Visa over chargebacks. AWS is partnering with Coinbase for the machine payments and Stripe for the traditional rails."

[B] "AWS is notoriously aggressive though. Why are they taking a neutral stance on the payment protocols themselves?"

[A] "Because the protocol doesn't matter if you own the real estate where the agent actually lives and breathes. The runtime environment is the platform where the agent receives its prompt, accesses corporate memory, and executes its code. So the runtime platform sees the entire context."

[B] "Context is the supreme currency in enterprise AI. AWS Bedrock sees the initial prompt from the employee. It records the logical steps the agent took. It logs every database the agent queried. It enforces the overarching corporate policy, like ensuring the agent doesn't pull data from a restricted European server, maintaining GDPR compliance, which is huge for the Scandinavian and broader European market."

[A] "And then, only after all of that, when the agent finally decides to spend money, AWS logs the justification for the purchase. It's total omniscience. If a regulator knocks on your door and asks why an autonomous system procured a specific data set from a foreign vendor, the runtime environment can just hand over the entire cryptographic chain of thought."

[B] "AWS is positioning itself as the ultimate, inescapable control room for the corporate AI workforce. Because it's the only way a highly regulated enterprise can safely participate in agentic commerce. Without that runtime oversight, you are essentially letting a black box algorithm loose with your corporate treasury."

## Layer 6: The Liability Layer

[A] "And that brings a very sobering reality into focus as we pull all of these pieces together into layer six: the ultimate mess. The liability layer. We have UCP logic puzzles, AP2 mandates, tokenized Visa cards, stablecoin micropayments, and AWS runtime environments all stacked on top of each other. And when this complex stack fails, the resulting liability mess is going to be staggering."

[B] "Utopian technologists often pitch a future of seamless interoperability where every system just openly talks to every other system. But the research strongly warns against believing that narrative."

[A] "Because the friction is where the profit is. The market is messy because the data required to resolve these liabilities is incredibly valuable. If an AI hallucinated the specs of a software contract, who is legally at fault? The model provider? The runtime environment? The mandate issuer? The payment rail?"

[B] "And if you are an enterprise operating under the strict privacy laws of the European Union, you can't simply broadcast the context of an agent's failure to some open protocol to figure out who is to blame."

[A] "Consequently, we will not see a perfectly open agentic web. We're going to see walled gardens. Massive walled gardens. Tech giants will demand that you operate entirely within their proprietary ecosystems if you want liability protection. The unbundling of the human click has basically exposed the entire nervous system of global commerce. And the major players are just scrambling to patent the newly exposed nerve endings."

## What This Means For You

[B] "So what does this all mean? For you, the business leaders, the procurement managers, and the strategists listening: what is your immediate takeaway?"

[A] "First, you just have to recognize that the fundamental physics of online buying are being rewritten. This shift is arguably more disruptive than the initial launch of commercial web browsers in the 1990s. And passivity is the greatest risk here. Your competitors, your vendors, and the software stack you rely on are already integrating these protocols."

[B] "So the critical action to take right now is to audit your operational strategy. You need to intentionally decide which of these six layers your business wants, or rather must, actively defend. If you are a retailer, you must figure out how to ingest UCP so your brand rules survive the AI filter. And if you are an IT director, you need to lock down a robust runtime environment before your employees start deploying shadow agents with corporate credentials."

[A] "You have to actively build your defense rather than letting an algorithm arbitrarily decide your fate."

[B] "And there's one final, really provocative thought from the source material. Consider the psychological shift this technology forces on the market. We have spent the last century perfecting the art of consumer marketing, appealing to human aspiration, emotion, and visual aesthetics to build brand loyalty. The entire advertising industry is built on making human beings feel a specific way about a product."

[A] "What happens if AI agents become perfectly efficient at optimizing purchases based purely on vector parameters, JSON files, and stablecoin micropayments? Who is the target audience for your brand then, when your customer delegates their purchasing power to a ruthlessly logical, emotionless codebase?"

[B] "Traditional marketing just ceases to function. The companies that dominate the next era of commerce will be the ones who solve a truly bizarre paradox: they will have to figure out how to make an algorithm loyal."

[A] "It strips away all the romance of the transaction, but it forces an incredible evolution. If you can't prove your value mathematically in a machine-readable format, you simply won't exist in the agentic economy. It's a brutal, fascinating new landscape. Something for you to mull over as you look at your own company's future."

[B] "Definitely. Thanks for joining us on this deep dive. We'll catch you on the next one."