Legislators are currently preoccupied with the GENIUS Act, a framework focused on stablecoin issuers that remains conspicuously silent on the mechanics of AI-initiated commerce. Into this regulatory vacuum, the FIDO Alliance has stepped with a strategy that prioritizes governance by architecture over legislative oversight. On April 28, 2026, the organization announced two new working groups: the Agentic Authentication Technical Working Group and an expanded Payments Technical Working Group.
The initiative brings together a coalition of industry incumbents — Google, Mastercard, Visa, and Coinbase — who have opted for collaboration over fragmentation. Rather than competing on proprietary rails, these firms are contributing foundational components to a three-layer stack. Google has donated its Agent Payments Protocol (AP2). Mastercard has contributed its Verifiable Intent framework. Coinbase has extended this by building x402, an A2A extension of AP2 that facilitates stablecoin settlement over HTTP 402.
The technical ambition is to create an auditable chain from a user’s initial intent to the final settlement. AP2 mandates are categorized into three types: Intent, Cart, and Payment. Every agent action is logged against the mandate. With the release of AP2 v0.2, the protocol now supports “Human Not Present” transactions, allowing agents to execute purchases autonomously based on pre-authorized mandates.
Yet technical security is not synonymous with consumer trust. A Product.ai survey from April 2026 found that only 14% of consumers trust AI to execute purchases without direct verification. The industry is building infrastructure for a market that remains fundamentally skeptical of the premise.
The FIDO Alliance is attempting to preempt legislative debate by establishing technical standards before regulators can intervene. The gap between a functional protocol and a trusted consumer experience remains wide. The architecture is being built. The question of who bears the cost when an agent acts within its mandate but against a user’s actual interest remains open — and potentially explosive.