Agentic Settlement Protocol: An Application Profile for Refundable, Delayed-Fulfilment Agent Commerce on Stablecoin Rails

• URL: http://arxiv.org/abs/2609.02208v1
• Date: Wed, 02 Sep 2026 07:21:25 GMT
• Title: Agentic Settlement Protocol: An Application Profile for Refundable, Delayed-Fulfilment Agent Commerce on Stablecoin Rails
• Abstract summary: HTTP-native protocols such as x402 let an agent sign a stablecoin authorization and receive a resource in the same round trip.<n>We present the Agentic Settlement Protocol (ASP), an application profile over on-chain authorize-and-capture escrow.<n>ASP contributes: a three-deadline hold model separating the issuance deadline, escrow expiry and the engine's inventory expiry.
• Score: 0.1491915554577276
• License: http://creativecommons.org/licenses/by/4.0/
• Abstract: Autonomous agents can already pay per request: HTTP-native protocols such as x402 let an agent sign a stablecoin authorization and receive a resource in the same round trip. That model is atomic and final, which suits metered access and fails commerce: a purchase made on a person's behalf -- a service appointment, a physical order, a flight -- is large, frequently cancelled, and should not become the seller's money until delivery. We present the Agentic Settlement Protocol (ASP), an application profile over on-chain authorize-and-capture escrow (as standardised by the Commerce Payments Protocol) for businesses whose fulfilment is confirmed off-chain by their own order, scheduling, invoicing or booking system, abstracted as a fulfilment engine. ASP contributes: a three-deadline hold model separating the issuance deadline, escrow expiry and the engine's inventory expiry by an explicit submission-inclusion-finality margin, under which no inventory is issued against reclaimable funds; a fulfilment-verification ladder stating who is trusted to trigger capture, what their attestation proves, and under what challenge window; engine-authoritative partial refunds with a refund-liquidity order and per-seller exposure controls, including atomic exposure reservation, that bound the operator's credit risk; distributor revenue share that is provably unprofitable to self-deal; a single-currency-per-charge invariant; and a normative interface specification (x402 scheme, vault ABI, operator and connector APIs, conformance levels) intended to let independent implementations interoperate. The design originated in a review of travel-agency participation in agentic settlement and is instantiated on the XDC Network. This is a design paper; a fault-injection evaluation plan is specified and measurement is left to follow-up work.

Related papers

• ACLE-MCP: Attested Capability Leases for Execution-Time Trust in Remote LLM Tool Use [29.860376266824872]
  OAuth authorization alone does not ensure that a later tool call is executed by the provider-side workload that the relying party intended to trust.<n>We present ACLE-MCP, an invocation-scoped architecture that couples delegated authorization, workload appraisal, and resource-side execution admission.
  arXiv  Detail & Related papers  (2026-09-02T14:58:17Z)
• A Formal Analysis of Agent Payment Protocols [21.91506763477032]
  Agent payment protocols are emerging as a key transaction layer for autonomous commerce.<n>We formalize four representative agent payment protocols: x402, MPP, ACP, and AP2 in Tamarin.<n>We use source-backed verification questions and counterexample traces to expose missing bindings, state constraints, and cross-stage correspondences.
  arXiv  Detail & Related papers  (2026-08-30T14:04:15Z)
• AgentProv: Auditing Agentic LLM API Providers via Tool-use Policy Probes [38.37599802008238]
  Commercial LLM APIs advertise a specific foundation model, but the served backbone may be silently substituted, quantized, or wrapped.<n>All existing audits decide backbone identity from the text-output channel.<n>We introduce Agentic Provenance (AgentProv), the first action-based identity audit for agentic LLM APIs.
  arXiv  Detail & Related papers  (2026-08-30T08:22:12Z)
• $Z^2$-ACT: End-to-End Verifiable Agentic Intent Control for Open 6G RAN [43.15181031994434]
  We propose a zero-knowledge auditable control and zero-trust verifiable agentic intent architecture.<n>A live large language model is used in the non-real-time path to translate operator intents into Intent Contracts.<n>Results indicate improved actuation filtering and attack resilience at modest latency and signaling cost.
  arXiv  Detail & Related papers  (2026-08-21T12:44:03Z)
• Themis Consensus Extension v1: MEV Mitigation by Randomized Delayed Execution and Intent-Hiding Transactions in Application-Specific Blockchains [0.0]
  We analyze the Themis Consensus Extension v1, first published by Mangata in 2021.<n>The design separates value extraction by reordering from value extraction by denial.<n>We analyze probabilistic extraction, spam, dependent transactions, decryption liveness, session boundaries, total denial, and threshold coalitions.
  arXiv  Detail & Related papers  (2026-07-23T15:05:09Z)
• OCELOT: Inference-Leakage Budgets for Privacy-Preserving LLM Agents [32.5466552510287]
  Leakage is cumulative, as individually innocuous releases accumulate across honest-but-curious or colluding sinks.<n>We present OCELOT, a runtime mediator that budgets how much an adversary's belief about a secret may improve.<n>OCELOT attains significantly lower leakage at higher task utility, resists adaptive injection, jailbreak, cumulative inference, and sink collusion.
  arXiv  Detail & Related papers  (2026-06-10T17:13:35Z)
• Sovereign Assurance Boundary: Certificate-Bound Admission for Agentic Infrastructure [2.124730017640531]
  Sovereign Assurance Boundary is a certificate-bound runtime admission layer for autonomous execution authority.<n>We detail the airlock-broker architecture, formalize its admission and revocation invariants, and report preliminary feasibility measurements from a Go prototype.
  arXiv  Detail & Related papers  (2026-06-10T03:49:57Z)
• Reasoning without Gold Standards: A Proxy-Judge Theory of Autoformalization [25.540859911959885]
  Autoformalization (AF) asks a model to translate informal mathematical or logical reasoning into a formally checkable object.<n>We introduce a reference-free proxy-judge framework for AF that replaces gold-standard matching with a vector of per-axis property checks.<n>Across seven formalization backbones on miniF2F, ProofNet, e-SNLI, and ProntoQA, refinement consistently lifts Pass Rate over the single-shot ICL baseline.
  arXiv  Detail & Related papers  (2026-06-08T12:57:09Z)
• RAILS: Verification-Native Clearing For Agentic Commerce [0.0]
  Clearing is the missing primitive for agentic commerce.<n>RAILS is the integrity and clearing layer for agentic commerce, spanning a per-output reliability score, a published reliability record, and a clearing function that consumes them.<n>Seven primitives yield a soundness property: no financially material settlement is supported by evidence below the obligation's admissibility floor.
  arXiv  Detail & Related papers  (2026-06-07T19:12:55Z)
• Digital Identity for Agentic Systems: Toward a Portable Authorization Standard for Autonomous Agents [0.0]
  This paper analyzes representative enterprise use cases in insurance claims processing and supply chain integrity.<n>It proposes a portable authorization model for autonomous agents based on issuer-authored authorization payloads.
  arXiv  Detail & Related papers  (2026-05-12T04:04:34Z)
• MEV-ACE: Identity-Authenticated Fair Ordering for Proposer-Controlled MEV Mitigation [1.7429038786735553]
  Maximal Extractable Value, or MEV, remains a structural threat to blockchain fairness.<n>This paper presents MEV ACE, a fair ordering protocol for proposer controlled ordering MEV.<n>The protocol remains single slot in structure, requires no threshold decryption committee, and is compatible with post quantum signature schemes such as ML DSA 44.
  arXiv  Detail & Related papers  (2026-04-08T20:12:06Z)
• Quantifying Trust: Financial Risk Management for Trustworthy AI Agents [27.23487816533652]
  We introduce ARS, a payment settlement standard for AI-mediated transactions.<n>ARS integrates risk assessment, underwriting, and compensation into a single transaction framework.<n>ARS shifts trust from an implicit expectation about model behavior to an explicit, measurable, and enforceable product guarantee.
  arXiv  Detail & Related papers  (2026-04-05T05:42:20Z)

This list is automatically generated from the titles and abstracts of the papers in this site.

This site does not guarantee the quality of this site (including all information) and is not responsible for any consequences.