Visa Has a Trusted Agent Protocol. Mastercard Has Verifiable Intent. Here’s the Layer Neither One Gives You

说明与用途

开发者现在可以使用ATC在不依赖支付网络的情况下证明代理信任，ATC将证据锚定在Rekor公共日志中，并可离线验证。

问题

Developers building agent commerce need third‑party verifiable evidence of trust that does not rely on payment network membership or API keys.

结果

By anchoring ATC artifacts in Rekor and enforcing two‑sided freshness and offline verification, the project delivers a third‑party auditable trust layer that complements Visa’s TAP and Mastercard’s VI, enabling developers to prove agent trust without relying on payment network membership.

工作流

• 1. Publish ATC artifacts and test vectors to a public GitHub repo.
• 2. Build the ATC package from the npm tarball and verify byte‑for‑byte reproducibility using the provided repro URL.
• 3. Submit the ATC release to Rekor for immutable anchoring; retrieve inclusion proofs via rekor.sigstore.dev.
• 4. Run the conformance suite (24 behavioral checks) against the ATC implementation to ensure compliance with the design lessons.
• 5. Use the ATC’s Ed25519 signature verification (offline, zero‑network) during transaction flows to provide instant trust evidence to merchants and auditors.

证据

TAP signs every request with time‑sensitive elements so stale authorization can’t be replayed.

来源

Our ATC verifies offline in milliseconds – one Ed25519 check against pinned trust anchors, zero network calls.

来源

Every release of our conformance suite is countersigned and anchored into Rekor, the public Sigstore transparency log.

来源