The Payment Layer Is Becoming the Execution Layer


OZ Signals

May 05, 2026

The Payment Layer Is Becoming the Execution Layer

Last week’s issue showed that selection is moving from market to model. Demand is no longer entering commerce only as traffic. It is entering as structured intent, filtered by systems before merchants get to compete. That explained who gets seen. This week moves one layer deeper. Once the system has interpreted demand and selected an option, the next question is not discovery. It is whether the agent can carry spend through the real economy without exposing credentials, breaking authorization, losing compliance, or failing in local payment environments.

This is a different category from selection. Selection decides what should happen. Payment execution decides whether it can happen safely. The market is now building infrastructure for that second problem. Stripe launched a wallet that gives agents controlled payment access. Google moved AP2 into FIDO so agent payments can become a shared standard. Ant International open-sourced a mobile payment protocol for wallets, super apps, and wearable environments. Ramp pushed agentic buying into procurement, where spend, vendors, contracts, and compliance are part of one workflow. OwlTing launched an agent wallet for stablecoin transactions under regulated infrastructure. Together, these signals show that delegated spend is becoming its own operating layer.

The important shift is not that agents can “pay.” That framing is too small. The shift is that payment credentials, approval flows, transaction context, settlement rails, and spend controls are being redesigned around non-human execution. In human commerce, payment was the last step. In agentic commerce, payment becomes the control system that determines what an agent is allowed to execute, under which constraints, and through which rail. The payment layer is no longer just moving money. It is becoming the place where delegated commercial action is permitted, bounded, and completed.


Signal 1: Stripe turned the wallet into an agent execution surface

On 29 April, Stripe launched Link’s wallet for agents, built on top of Stripe’s new Issuing for agents. The wallet gives agents programmatic access to Link and lets them generate either a one-time-use card or a Shared Payment Tokenbacked by the user’s existing cards and bank accounts. Stripe says the agent never receives raw payment credentials, and users can review and approve spend requests through Link before the credential is shared with the agent.

This is structurally important because Stripe is not merely giving agents a payment method. It is converting the wallet into a permissioned execution layer. The agent does not need to hold the user’s card. It receives a scoped credential after the user approves the specific spend request. That credential can be limited by context such as amount, currency, and merchant. In plain terms, the wallet becomes the control room between the user’s money and the agent’s action.

What this changes is the shape of checkout. The old model assumed a human arrived at checkout, selected a payment method, and confirmed the transaction. The new model lets an agent request payment authority, receive a limited credential, and complete the purchase across businesses that may not yet support fully machine-native payment protocols. The second-order implication is significant: wallets may become the fastest bridge between today’s internet checkout and tomorrow’s agent-native commerce, because they can make agents useful before the entire merchant ecosystem rebuilds.

Break: Checkout stops being the moment a human confirms payment when the wallet can issue controlled spending authority to an agent.

Source: Stripe Link


Signal 2: Google moved AP2 into FIDO so agent payments can become shared infrastructure

On 28 April, Google announced that it is donating Agent Payments Protocol, or AP2, to the FIDO Alliance. Google also released AP2 v0.2, which introduces updates for autonomous transactions, including Human Not Present payments, where agents can execute payments based on pre-authorized user instructions. Google said AP2 is also helping drive Verifiable Intent, an AP2-compatible standard co-developed with Mastercard that creates a tamper-proof log of user-authorized agent actions.

This matters because delegated payments cannot scale as a private product feature inside one company’s ecosystem. If every platform defines authorization differently, merchants and payment providers will be forced to evaluate fragmented proofs of user intent. By moving AP2 into FIDO, Google is pushing agent payment authorization toward a shared, platform-agnostic standards process. That is not only a trust move. It is a market-structure move.

What this changes is where payment legitimacy is decided. In human commerce, legitimacy often came from the user being present, authenticated, and actively confirming the transaction. In agentic commerce, the user may not be present at the transaction moment. That means the system needs a durable proof that the agent acted within a previously authorized instruction. The second-order implication is that pre-authorization may become as important as checkout authorization, especially for time-sensitive purchases, recurring agent tasks, and commerce that happens while the human is offline.

Break: User presence stops being the default proof of payment intent when agents can execute pre-authorized transactions without the human in the moment.

Source: Google AP2


Signal 3: Ant International is taking agentic payments into mobile wallets, super apps, and wearable commerce

On 28 April, Ant International introduced the open-sourced Agentic Mobile Protocol, or AMP, for agentic commerce. The protocol is designed for mobile interfaces including digital wallets, banking apps, super apps, mobile portals, and wearable devices. Ant says AMP enables LLMs, platforms, and merchants to connect agentic payment functionality to digital wallets and mobile services, and frames the protocol as a way to reach billions of digital wallet users through secure integration.

The structural importance is that agentic payments cannot be treated as a web checkout problem. In many high-growth commerce markets, the primary transaction surface is not a desktop browser or a card form. It is a mobile wallet, super app, bank app, or embedded payment experience. AMP is a signal that the agentic payment layer is already fragmenting by interface, geography, and consumer behavior.

What this changes is the global scaling model. A merchant may be ready for agentic commerce in a card-heavy market and still fail in wallet-heavy environments if the agent cannot authenticate, trigger payment, and complete post-checkout settlement inside local mobile rails. The second-order implication is that payment localization becomes execution infrastructure for agents, not an afterthought. The agent may interpret demand globally, but payment still clears through local habits, rails, and trust systems.

Break: Agentic commerce does not become global by adding AI to checkout. It becomes global only when agents can execute through the payment surfaces people already use.

Source: Ant AMP


Signal 4: Ramp moved agentic commerce into procurement, where buying is already controlled by policy

On 29 April, Ramp launched a suite of AI agents across its procurement platform. Ramp says these agents can source vendors, generate RFx processes, run compliance checks, prepare negotiation support, and help manage purchasing end to end. Ramp’s own framing is clear: instead of procurement software assuming companies will build teams around it, Ramp is building agents that perform work previously reserved for dedicated procurement headcount.

This is a high-value signal because enterprise procurement is where agentic commerce becomes economically serious. Consumer shopping gets attention, but business buying already has the structures agents need: budgets, vendor rules, approval paths, compliance checks, contract terms, renewal dates, and spend categories. Ramp is not just adding automation to purchasing. It is turning procurement into a governed agentic workflow where the agent can move from request to sourcing to evaluation to payment-adjacent execution.

What this changes is the meaning of “buyer.” In B2B commerce, the buyer may no longer be a person searching for vendors and pushing a request through finance. The buyer becomes a system that translates employee need into compliant vendor selection, negotiation context, and purchasing action. The second-order implication is uncomfortable for suppliers: selling into companies may increasingly require being legible to procurement agents, not just persuasive to human stakeholders.

Break: The enterprise buyer stops being only a person with budget when procurement agents can source, compare, check compliance, and move the purchase forward.

Source: Ramp Procurement


Signal 5: OwlTing is pushing agent wallets toward stablecoin settlement and regulated rails

On 4 May, OwlTing launched OwlPay Agent Wallet, a digital wallet designed for AI agents to send, receive, and manage stablecoins on behalf of users. The company says the wallet lets agents act under user authorization, with self-custody private keys generated and stored locally on the user’s device. OwlTing also positions the product around regulated payment infrastructure, including U.S. money transmitter licenses and existing Visa Direct-related capabilities for USDC funding.

This signal matters because it points to a different branch of agentic payment infrastructure. Stripe’s Link wallet bridges agents into existing consumer payment methods. OwlTing is pushing toward an agent-operated stablecoin wallet tied to regulated infrastructure. That does not mean stablecoins replace cards immediately. It means the agentic payment stack is splitting into multiple execution models: card-backed credentials, shared payment tokens, mobile wallet protocols, procurement rails, and stablecoin settlement.

What this changes is the settlement layer question. If agents begin executing cross-border purchases, supplier payments, subscriptions, and transfers, stablecoins become attractive because they can move value programmatically across borders and networks. But that only matters if the wallet can sit inside real compliance frameworks. The second-order implication is that the agent wallet category may become a fight between convenience wallets, enterprise spend platforms, mobile payment protocols, and regulated stablecoin rails.

Break: Payment rails stop being invisible infrastructure when agents need wallets that can hold value, obey authorization, and settle across networks.

Source: OwlPay Wallet


The System That Is Emerging

The hidden system beneath this week’s developments is a shift from payment as checkout to payment as delegated execution control. Last week, the market was moving toward system-mediated selection, where AI determines what gets surfaced before the user sees the market. This week shows what has to happen after selection: agents need a way to spend, but not with unrestricted access to human payment credentials. They need scoped authority, transaction context, approval records, local rail compatibility, and settlement options that can survive outside the narrow card checkout model.

Control is moving toward the infrastructure that can translate intent into spend authority. Stripe is doing it through Link and Issuing primitives. Google is pushing AP2 into standards governance. Ant is adapting agentic payments to mobile-wallet economies. Ramp is moving delegated buying into enterprise procurement. OwlTing is testing the stablecoin wallet branch of the same shift. These are different routes into one system problem: agents cannot become durable commercial actors until payment infrastructure can decide what they are permitted to spend, where they are permitted to spend it, and how the transaction can later be understood.

For operators, the practical change is clear:

  • Wallets are becoming permission systems, not just stored payment methods.
  • Payment protocols are becoming proof systems for delegated intent.
  • Procurement tools are becoming autonomous buying environments.
  • Mobile payment rails are becoming necessary for agentic commerce outside card-heavy markets.
  • Stablecoin wallets are emerging as a possible settlement layer for agent-executed value movement.

Core Truth: In agentic commerce, the winner is not the agent that recommends best. It is the system that can safely turn delegated intent into executable spend.

Tool of the Week Link Wallet for Agents

Stripe’s Link wallet for agents is the strongest tool of the week because it solves a practical problem most agentic commerce demos avoid: how an agent gets payment authority without receiving raw credentials. The wallet lets a user grant an agent access through Link, review a spend request, and allow the agent to receive a scoped one-time-use card or Shared Payment Token to complete the purchase.

At system level, this matters because it creates a bridge between today’s merchant checkout environment and tomorrow’s machine-native payment protocols. Most merchants will not rebuild immediately for agentic commerce. A wallet-based credential layer lets agents act across existing payment environments while keeping users in control and preserving transaction visibility. That is structurally important because the fastest path to agentic commerce may not be replacing checkout. It may be wrapping checkout with controlled, agent-issued spend authority.

Source: Link Wallet

Trend to Watch

Delegated spend will split into multiple execution rails

The early pattern this week is that agentic commerce is not converging around one payment path. It is splitting into several execution rails at once: consumer wallets, shared payment tokens, card issuing, mobile wallet protocols, enterprise procurement workflows, and stablecoin wallets. That matters because each rail solves a different problem. Consumer wallets solve everyday purchasing. Procurement agents solve governed business buying. Mobile protocols solve regional payment behavior. Stablecoin wallets solve programmable cross-border value movement. Standards such as AP2 and Verifiable Intent try to make these rails interoperable enough to trust.

The strategic watchpoint is whether merchants and platforms treat agentic payments as one integration or as a layered capability. The second is more realistic. A serious agentic commerce stack will need to understand which rail is appropriate for the task, the market, the user, the merchant, and the risk level. The companies that build only for card-based agent checkout may work in some markets but fail in wallet-led or procurement-led environments. The companies that build with rail flexibility will be better positioned as agent-led demand becomes real commercial execution.

The most important update from this week is that the market has moved past the question of whether agents can choose. It is now building the infrastructure that determines whether agents can spend. That is where the power shift becomes harder to ignore. Selection controls who gets considered, but payment execution controls who gets paid. The players closest to wallets, issuing, authorization standards, procurement workflows, mobile rails, and settlement networks are positioning themselves as the control points between machine intent and real money.

OZ Signals will keep tracking this layer because it is where many surface-level AI commerce predictions will either become real or fail quietly. If agents cannot receive bounded spend authority, execute through local rails, preserve authorization evidence, and settle inside regulated systems, they remain assistants with recommendations. If they can, they become economic actors. The next phase of commerce will be shaped by the systems that decide not just what agents may choose, but what they are allowed to pay for, how, and under whose risk.

Box Hill (Sydney), NSW 2765, Australia
Unsubscribe

OZ Signals

OZ Signals is a weekly intelligence briefing on how AI is restructuring commerce systems. Built for founders, operators, and decision-makers who want high-signal insights, not noise.

Read more from OZ Signals
Minimal editorial diagram showing a shopping cart at the center connected to product data, ads, payments, checkout, and merchant tools.

OZ Signals May 26, 2026 View in browser When the Cart Became the Control Layer Issue 9 tracked the rise of the implementation layer, where agencies, enterprise systems, storefront builders, and deployment partners started making AI commerce installable inside real businesses. That mattered because AI commerce was no longer only a platform announcement. It was becoming something merchants could actually connect, configure, and operate. Issue 10 moves one layer deeper. The week of 19 May to 25...

Minimal editorial image showing AI commerce moving from concept into implementation through storefronts, agencies, assistants, and operational systems

OZ Signals May 19, 2026 View in browser AI Commerce Is Moving Into the Implementation Layer Last week’s issue showed that AI commerce is moving beyond checkout into fulfillment, logistics, service, and post-purchase systems. This week explains the next layer: implementation. The market is no longer only experimenting with AI commerce. It is beginning to build the infrastructure required to deploy it across real businesses. That shift matters because most retailers are not limited by awareness...

Minimal editorial image showing an AI commerce loop moving from intent to payment, then into fulfillment, service, clienteling, and post-purchase support.

OZ Signals May 12, 2026 View in browser The Transaction Is No Longer the End of Commerce Last week’s issue showed that the payment layer is becoming the execution layer. Once AI systems can select what to buy, the next structural question is how they receive controlled authority to spend. That layer matters because agentic commerce cannot scale if agents can recommend products but cannot safely complete the transaction. This week moves one step further. Once payment becomes executable, the...