AI 中文总结
研究针对代理商务问题，提出以决策为中心的与协议无关的架构，含规范信封等多种机制，通过开源实现、多场景和消融评估，支持受保护依赖项检测等多项功能，但未涵盖部分关键特性。
AI 中文摘要
代理商务将代理购物扩展到软件代理，软件代理可解释策略、准备结账、生成面向交易的语言并在委托支付权限下行动。协议规范了外部交换，但商家仍需要一个关于商业资格、行为者权限、结账有效性、支付调度、生成的声明和证据的权威表示。本设计科学研究提出了一种与协议无关的架构，围绕规范信封、受保护的依赖项和结果哈希、Ed25519或HMAC认证、实时请求重新绑定、七轴生成声明门、执行时依赖项重新验证和十一个语义不变量构建。评估使用了开源JavaScript实现、八个确定性电子商务场景和五个受控消融。结果支持在合成夹具下的受保护依赖项更改检测、有界结果推导、过时决策预防、表面绑定状态一致性、拒绝传播和验证状态标识，但未建立规则完整性、生产安全性、性能、法律合规性、实时互操作性、总体错误率或独立复制。
英文摘要
Agentic commerce extends agentic shopping into software agents that interpret policy, prepare checkout, generate transaction-facing language, and act under delegated payment authority. Protocols standardize external exchanges, but merchants still need one authoritative representation of commercial eligibility, actor authority, checkout validity, payment dispatch, generated claims, and evidence. This design-science study presents a protocol-agnostic architecture built around a canonical envelope, protected dependency and result hashes, Ed25519 or HMAC authentication, live-request rebinding, a seven-axis generated-claim gate, execution-time dependency revalidation, and eleven semantic invariants. Evaluation used an open-source JavaScript implementation, eight deterministic ecommerce scenarios, and five controlled ablations. Seven initially valid actions were permitted. After protected state changed, none could proceed without a fresh decision; a hostile-accessor case also remained blocked. Action status was consistent across configured surface-bound envelopes, and each scenario contained the three protected hashes and its targeted dependency reference. Each ablation produced the predicted unsafe regression when one safeguard was bypassed, while the protected path contained the same failure. The hostile accessor was read once, and the suite passed 66/66 tests, schema validation, and committed examples. Results support protected-dependency change detection, bounded outcome derivation, stale-decision prevention, surface-bound status consistency, refusal propagation, and verified-state identity under synthetic fixtures, but do not establish rule completeness, production security, performance, legal compliance, live interoperability, population error rates, or independent replication.
Comments23 pages, 3 figures. Includes ancillary reproducibility materials
