You accept payment authorisation without checking it

It concerns AP2, the payment authorisation. The Agent Payments Protocol. It proves a real person authorised the agent to spend, so you are not taking an agent's word for it.

An agent that meets this stops: it cannot finish the journey, and the shopper is sent to a store where it can.

Verify the mandate rather than trusting the agent's claim. A mandate nobody checks is a formality, and the authorisation it represents is not real.

Run the check that reported AP2_MANDATE_NOT_VERIFIED again after the change. The scan needs no account; an issue found during an AI shopping test needs that test run again.

$ npx @tragent/cli scan https://your-store.com

• Your payment-authorisation address does not answer
• No payment authorisation was presented
• The payment authorisation does not check out