ARCHITECTURE & PROTOCOLS
How AI Agents Transact and Guard Personal Data
Transaction protocols move agent orders across owned infrastructure, while Agentic Boundary Tokenization cryptographically seals consumer data.
The short answer
AI shopping agents transact with businesses using protocols like ACP, AP2, and UCP directly on merchant-owned infrastructure, while Agentic Boundary Tokenization (ABT) cryptographically governs the personal data inside the interaction. Plaintext personal details never cross the network; instead, merchants hold ciphertext and a callback URL.
Agentic commerce enables businesses to become discoverable and transactable by autonomous shopping agents on infrastructure they own rather than renting customer relationships from platforms. Within the transaction, ABT enforces client-side encryption, callback-mediated key release, per-tier projections, and forward-only tier activations anchored to a public registry.
- Agent-commerce protocols like ACP, AP2, and UCP move transactions, while ABT stacks with them to govern personal data.
- Plaintext personal data never crosses the network because encryption occurs first-party on the consumer device.
- Merchants hold only ciphertext and a callback URL, meaning retention ceases when the device stops releasing keys.
- Autonomous systems run under bounded authority, ensuring any action touching money or fulfillment stops for human authorization.
OWNED INFRASTRUCTURE
Transacting on Owned Infrastructure Rather Than Platforms
Agentic commerce centers on making a merchant discoverable and transactable to autonomous buyers on systems the merchant directly controls.
Direct Business Discoverability
Businesses build discoverability and checkout capabilities on their own infrastructure rather than renting their storefront and customer relationships from third-party platforms.
Property-Local Execution
Execution, customer records, and payment processing remain strictly local to each property, ensuring a central service failure never breaks local checkout operations.
PROTOCOL SEPARATION
Separating Transaction Movement from Data Governance
An AI agent purchase requires two distinct protocol layers: moving the order payload and establishing boundaries around the human shopper's identity.
Transaction Movement Protocols
Agent-commerce protocols such as ACP, AP2, and UCP handle discoverability, cart transfer, and the movement of the order between agent and merchant.
Cryptographic Boundary Governance
Agentic Boundary Tokenization (ABT) does not compete with movement protocols; it stacks with them to govern what personal data is revealed, for what purpose, and for how long.
CRYPTOGRAPHIC ARCHITECTURE
The Envelope-Tier Architecture Protecting Shopper Data
Traditional privacy relies on merchant promises to delete collected data, whereas ABT enforces personal data limits through device-side cryptography.
First-Party Device Encryption
Personal information is encrypted on the consumer's device prior to transmission, ensuring plaintext never traverses the network to the merchant or AI agent host.
Callback-Mediated Key Release
The merchant holds ciphertext and a callback URL, receiving time-bounded keys strictly through forward-only activations governed by the consumer's device.
Enforcement Without Promises
Data retention is enforced by the device ceasing to release decryption keys once fulfillment concludes, rather than depending on merchant policies to delete stored records.
Go deeper
OPERATIONAL DISCIPLINE
Tamper-Evident Verification and Bounded Operations
Autonomous execution must operate within verified constraints backed by durable records rather than opaque operational logs.
Evidence Over Inference
The Evidence/Event Chain (EEC) maintains a tamper-evident SHA-256 hash-chained history of state transitions that points to durable business rows.
Public Ledger Anchoring
ABT deployments anchor to a public ledger, allowing boundary violations to be independently established instead of relying on internal company logs.
Bounded Human Gates
While autonomous operations handle self-healing technical fixes behind strict test gates, any operation touching money or order fulfillment halts unconditionally for human review.
Where this connects
The rest of the architecture
What Is Agentic Commerce? ACP, AP2, and AI Agent Shopping Explained
Why Agentic Commerce Requires a VPS — The Order Has to Land Somewhere
Agentic Commerce and SEO — How AI Agents Change the Organic Traffic Equation
Invisible to AI Agents — How Stores Disappear from Agentic Commerce
ABT-C — Agentic Commerce Tokenization
Agentic Commerce vs Shopify — Why Ownership Beats Subscription in 2026
The Agentic Commerce Map
ABT — Agentic Boundary Tokenization | Cryptographic Protocol
Deploy Governed Agentic Commerce
Make your business directly transactable by AI agents while cryptographically guarding customer data on infrastructure you own.