Signing the Transaction but Not the Decision: Whisper Attacks and a Binding
A September 10, 2026 arXiv paper shows that agent payment protocols such as AP2 produce cryptographically valid signatures for completed purchases without constraining the decisions behind them, letti…