Agent transaction control and settlement

TikTok has combined a conversational shopping assistant with one-click checkout, adding a large consumer distribution surface to the existing trusted-agent-payments line. Discovery, recommendation and transaction now occur inside one conversational flow. The mechanism strengthens the case for delegated purchase controls, attribution and dispute handling, but evidence today comes from one platform launch and provides no conversion or fraud data.

Agent commerce is moving from product discovery to transaction execution. Shopify has extended WebMCP into checkout so browser agents can update orders and complete purchases with buyer authorization, Anthropic has published reference shopping and merchant agents, and independent market commentary identifies representation and authorization as the missing control. The commercial interface is emerging together with its trust problem: merchants need to know whom an agent represents, what it may spend and how consent can be proven after the transaction.

Agent evaluation is shifting from final-answer scoring to process, regression and checker quality. New work isolates trainable failure states, selects cheaper trajectory subsets, evaluates computer-use processes and mutates benchmark oracles; an operator message explicitly pairs online evaluation and offline benchmarking with production infrastructure. Reliability is becoming an always-on engineering layer.

As agents spread across local tools and subagents, control is moving from individual prompts to the host and execution environment. Agent inventories, context-reprocessing regressions, external subagent executors and self-hosted company operating systems point to a need to inspect what agents can touch, how they run and where their cost and failure modes accumulate.

Agent commerce is gaining an operational trust layer rather than stopping at wallets and payment protocols. An AWS case study reports more than 20 million autonomous transactions governed by endpoint scoring, session budgets, credential isolation and a deterministic trust gate; independent builder evidence shows agents assembling Shopify and Stripe stores; and a year-long e-commerce benchmark tests negotiation, inventory, fulfilment, returns and cash flow. The market consequence is a new control surface around delegated spending, counterparties and transaction policy.

Production reliability is shifting from checking an agent's answer to controlling the state transition it causes. Operators want previews cryptographically or semantically bound to the later apply operation, repeatable smoke tests against the real service, named approval before destructive commands, and visible reasons when workers skip tasks. A new approval product reflects the same commercial demand. Agent execution is beginning to require the transactional guarantees, observability and authorization boundaries already expected from financial and deployment systems.