Human approval is strongest at the checkout boundary and weakest as evidence about how the cart was assembled.
Why this question matters
AP2 describes a cart mandate for a human-present transaction. The signed cart can bind the approved items and payment context. This reduces ambiguity about what the user authorized at the final moment.
The user may still see a choice architecture produced by agents with hidden affiliations or shared incentives. Coordinated recommendations, selective inventory disclosure, and synthetic urgency can all precede a perfectly authentic approval.
Signals worth observing
- The cart is stable but its recommendation trail is unavailable.
- Related agents repeatedly reinforce the same seller or product.
- Urgency claims appear across independent-looking sources.
Practical control direction
- Preserve recommendation provenance alongside the signed cart.
- Label sponsored or affiliated agent relationships.
- Provide comparison evidence before final approval.
AgentCollusion lensSecure checkout should be one node in a broader graph of discovery, influence, authority, and settlement.Sources and further reading
Next field note: Agentic Procurement Can Hide Bid Coordination
