Every publication keeps its address. Versions are never overwritten; a correction appears
alongside its predecessor with a dated note. See versions and errata.
Listed newest first. Publications that share a date are ordered with the definitions
version above paper no. 6.
The measurement vocabulary: evaluation coverage, mandate conformance, divergence
incidence over six predicate classes, and unauthorised continuation — with the ways each of them
can be made to lie, published beside them.
Paper no. 6. Confirmation of Payee puts the duty in a regulator's direction and the content of
the check in a rule book someone else maintains. What a later instrument would have to add.
Paper no. 5. Part 7 of the Payment Services Regulations 2017 is a working loss-allocation
regime wired to authentication and to the rail fields. For a software delegate acting on a standing
instruction, authentication and consent come apart. Four doors are opened — regulation 76, regulations
91 to 94, regulation 79, and the APP-reimbursement overlay — and none reaches the case where the close is
outside the description the payer gave. The finding is about evidence, not remedy: nothing examined
requires anyone to keep the record — grant, close and join — with which the question could be tried.
An autonomous agent can execute a purchase that violates what its user meant
while producing the behavioral signature of a perfect checkout. The protocols name the
mismatch; the UK rails cannot project the evaluation into the payment record; four measures
would make the gap countable, with coverage reported first.
A response to HM Treasury on adapting the Payment Services Regulations 2017 to
agentic payments: why a transaction can satisfy every machine-enforced condition of a delegated
authority and still leave open the question whether the payer consented to what was executed,
where the regulations already place the legal test, and what regulation should require so that
the question is answerable and countable.
A response to the Bank of England's Retail Payments Infrastructure Board on agentic
payments and advanced delegation: what the published agent-payment protocols do not produce when a
human is brought back into the loop, why the rails cannot reconstruct the authority decision, and
the narrow capability that would let an executed agentic payment be joined to the authority that
permitted it.