Six Banks Just Published Agentic Commerce Guardrails — But They’re Voluntary

Six major banks — NatWest, Bank of America, ING, Capital One, Commonwealth Bank of Australia, and ASB Bank — published "Building Trust in Agentic Commerce" on September 22, 2026, a voluntary framework of five principles (transparency, safety, privacy and data protection, consumer choice, and interoperability) for agent-driven purchasing. The paper establishes no compliance requirements, enforcement mechanisms, or liability allocation, even as PYMNTS Intelligence reports 93 percent of merchants believe AI and agent providers should bear the loss when agent-driven transactions go wrong. Bank of America's head of digital payments called the guardrails "a framework for responsible innovation," and NatWest's chief digital officer called them "a starting point for industry collaboration.

On September 22, 2026, six major banks published “Building Trust in Agentic Commerce” — a set of voluntary guardrails for agent-driven purchasing. The paper, authored by NatWest, Bank of America, ING, Capital One, Commonwealth Bank of Australia, and ASB Bank, outlines five principles: transparency, safety, privacy and data protection, consumer choice, and interoperability. It is the first coordinated attempt by financial institutions to address how autonomous agents should behave when spending money on behalf of humans. The principles read as sensible and vague in equal measure. Transparency means agents should disclose when they are acting autonomously. Safety means transactions should have appropriate authentication and authorization. Privacy means agents should handle data responsibly. Choice means consumers should be able to control and override agent behavior. Interoperability means agent systems should work across platforms. None of these are controversial. None of them are enforceable. The voluntary framing matters because the agentic commerce market is accelerating faster than regulatory frameworks can track. Constructor’s Stripe-powered Agentic Checkout https://forkast.news/constructor-just-turned-its-shopping-agent-into-a-checkout-agent-and-the-liability-gap-just-got-real/ , launched in October 2026, enables transactions directly within shopping agents. Meta and Sierra’s Personal Agent Protocol https://forkast.news/sierra-and-metas-personal-agent-protocol-gives-commerce-a-common-front-door-for-those-willing-to-open-it/ , launched the same month, defines how personal agents authenticate and transact with businesses. The infrastructure is shipping. The guardrails are suggestions. The gap between shipping infrastructure and binding standards is not new. But the pace of agentic commerce adoption makes it sharper. PYMNTS Intelligence reports that 93 percent of merchants believe AI and agent providers should bear the loss https://forkast.news/the-agentic-commerce-liability-gap-is-real-and-nobody-is-solving-it/ when agent-driven transactions go wrong. The six-bank framework does not address liability allocation. It does not address what happens when an agent purchases the wrong item, or purchases without clear authorization, or purchases in a way that the consumer did not intend. The merchant perspective adds another dimension. When Shopify drew a hard line on agent access in September 2026 https://forkast.news/shopify-just-drew-a-hard-line-on-agents-and-the-industry-chose-a-different-door/ , blocking unauthorized agents from crawling merchant data, the industry response was to build protocols — PAP, ACP, Visa TAP — that give merchants structured ways to engage with agents rather than block them. The six-bank framework sits on top of those protocols but does not enforce them. It asks banks to consider how their payment infrastructure should interact with agent transactions without requiring any specific technical integration. The timing is revealing. The guardrails published two weeks after the agent commerce stack crystallized into distinct execution, payment, and identity layers https://forkast.news/the-agent-commerce-stack-just-formed-and-nobody-agrees-on-the-shape/ . Visa TAP provides merchant visibility. Stripe ACP handles checkout. PAP manages agent authentication. The six-bank framework is the institutional acknowledgment that these layers exist — but it is acknowledgment, not architecture. Bank of America’s head of digital payments, in the bank’s press release, described the guardrails as “a framework for responsible innovation.” NatWest’s chief digital officer called them “a starting point for industry collaboration.” These are diplomatic framings for a document that establishes no compliance requirements, no enforcement mechanisms, and no penalties for non-adherence. The practical significance is directional rather than operational. When six major banks across four countries jointly acknowledge that agentic commerce requires guardrails, they are signaling that the category has crossed a threshold of institutional recognition. The principles themselves — transparency, safety, privacy, choice, interoperability — are likely to shape how regulators eventually approach agent-driven transactions, even if the current document carries no regulatory weight. For merchants deploying agentic checkout — from Constructor’s integration with Stripe https://forkast.news/constructor-just-turned-its-shopping-agent-into-a-checkout-agent-and-the-liability-gap-just-got-real/ to Shopify’s agent-facing APIs — the practical question is whether voluntary bank principles will influence the technical standards that actually govern agent transactions. The answer, so far, is that the technical standards are being written by platform companies, not by banks. PAP, Visa TAP, and ACP define the actual protocols. The bank framework provides the institutional vocabulary for discussing them. The guardrails are a beginning, not a solution. As agent-driven purchasing scales — from the 2.5 percent of John Lewis searches that come through AI agents Reuters, September 2026 to the broader commerce surface that protocols like PAP are designed to enable — the gap between voluntary principles and binding standards will become harder to maintain. The six banks have named the problem. Whether they will enforce the solution is a different question entirely.