AP2 mandates

Cryptographic authorization that an agent may spend — Intent, Cart, Payment, or standing.

Types

• standing — human issues in the Agents UI (max amount + expiry)
• intent / cart / payment — structured commerce flow

API

POST /api/v1/mandates   # agent:mandate scope
GET  /api/v1/mandates

Humans can also POST /api/agents/:id/mandates (session auth). When policy requireMandate is true, payments must include mandateId.