The Credential Is Becoming the Limit Two weeks of competing architectures in agentic commerce now share one move: putting the spending limit inside the payment instrument itself. American Express’s Intent Intelligence Framework, unveiled at TechCrunch Disrupt, issues a scoped payment credential derived from an intent token that carries the buyer’s merchant, maximum budget, and preferences.…
The pitch around agentic AI used to be about what the software can do. This month it is about how fast the proof will arrive. In an October 8, 2026 post adapted from his Gemini at Work 2026 keynote, Google Cloud CEO Thomas Kurian highlights a Deloitte offering: the firm’s Agentic AI blueprint “develops operational…
Most of the entries in the checkout-definition war we have been mapping try to build something new. American Express moved intent evidence toward issuers with its Proof of Intent token. Ripple and Privy put programmable wallets on the XRP Ledger and let agents hold funds of their own. Crossmint’s Agent Commerce Toolkit, announced October 8,…
An unauthenticated crafted packet becomes code execution in AD DS. Microsoft’s record carries CVSS 8.1 with high attack complexity and no observed exploitation.
A flaw in Keycloak’s IdentityProviderResource component allows for the inadvertent reuse of masked client secrets during OIDC configuration updates, creating a path for credential interception. Disclosed on October 13, 2026, CVE-2026-15943 represents a failure in the secret-masking boundary within the Keycloak IdentityProviderResource. The vulnerability centers on how the system handles masked sentinel values-typically represented as…
Capital in the agentic AI sector is not flowing; it is being funneled. We are currently witnessing a massive consolidation of resources through three distinct mechanisms: equity, compute-debt, and margin compression. Each door leads to the same destination—a market where only the largest balance sheets survive. The Equity Door: Concentration as Strategy Through September 25,…
TRON’s agent identity standard is Final and Ethereum’s is still Draft. The team that finished it sells the stack that runs on it, and the spec’s own schema carries the payments its text disclaims.
Broadcom is no longer just selling chips to the AI industry’s biggest labs. It is financing them. The chipmaker, which already lent Anthropic $42 billion through a convertible note facility disclosed in Anthropic’s S-1, is now in talks to arrange financing for OpenAI’s custom processors. Two independent reports disagree on the size by $20 billion,…
A permission token is a spending authorization an AI agent carries instead of your card. Learn how budgets, payment mandates, and revocable grants work.
Card-based checkout for AI agents ended in March 2026. That was when ACP retired its in-chat flow. The industry finally admitted that forcing legacy payment rails into agentic workflows was unsustainable. Now, the market is splitting into two distinct, stablecoin-native replacement rails: the x402 protocol and the Machine Payments Protocol (MPP). They are not converging.…