Visa Has a Trusted Agent Protocol. Mastercard Has Verifiable Intent. Here’s the Layer Neither One Gives You

Описание и применение

Разработчики, создающие агентскую коммерцию, получили возможность проверять доверие без участия платежных сетей, используя ATC, который хранит доказательства в публичном журнале Rekor и проверяется офлайн.

Задача

Developers building agent commerce need third‑party verifiable evidence of trust that does not rely on payment network membership or API keys.

Результат

By anchoring ATC artifacts in Rekor and enforcing two‑sided freshness and offline verification, the project delivers a third‑party auditable trust layer that complements Visa’s TAP and Mastercard’s VI, enabling developers to prove agent trust without relying on payment network membership.

Рабочий процесс

• 1. Publish ATC artifacts and test vectors to a public GitHub repo.
• 2. Build the ATC package from the npm tarball and verify byte‑for‑byte reproducibility using the provided repro URL.
• 3. Submit the ATC release to Rekor for immutable anchoring; retrieve inclusion proofs via rekor.sigstore.dev.
• 4. Run the conformance suite (24 behavioral checks) against the ATC implementation to ensure compliance with the design lessons.
• 5. Use the ATC’s Ed25519 signature verification (offline, zero‑network) during transaction flows to provide instant trust evidence to merchants and auditors.

Доказательства

TAP signs every request with time‑sensitive elements so stale authorization can’t be replayed.

Источник

Our ATC verifies offline in milliseconds – one Ed25519 check against pinned trust anchors, zero network calls.

Источник

Every release of our conformance suite is countersigned and anchored into Rekor, the public Sigstore transparency log.

Источник