Industry Vocabulary Reference

Agentic Payments & Stablecoins

Comprehensive enumeration library for the Agentic Payments & Stablecoins vertical. Covers every subdomain where agentic AI is actively deployed in payment workflows as of July 2026: AP2 mandate chain governance (Google Agent Payments Protocol v0.2), x402 HTTP-native stablecoin payments (Coinbase), stablecoin asset and issuer compliance (GENIUS Act, EU MiCA), agentic commerce provider classification, fiat instant rail governance (FedNow, RTP, SEPA Instant), and payment regulatory regime tagging. Designed for use as OTel span attributes in an agentic AI SDK and as policy vocabulary in an OPA Rego GRC portal. The AP2 mandate chain (OpenPaymentMandate → PaymentMandate → PaymentReceipt) is the primary governance model; browser-commerce agents and stablecoin treasury transfers are the highest-risk modalities requiring the most rigorous evidence capture.

Back to industry coverage library

This page shows selected examples and categories. Download the JSON for the complete vocabulary, including every field, permitted value, and policy pattern in this catalog.

How to use this reference

1. Start with the core file if you need the cross-industry governance baseline.
2. Choose an industry file for its workflow fields and permitted values.
3. Match the OTel attributes to the policy paths your rules use, then verify the recorded fields in a test session.

Catalog context

As of July 2026, agentic AI is deployed across all major payment rails as an initiator, delegator, and governance certifier of transactions. Google AP2 (Agent Payments Protocol v0.2) provides a structured mandate chain (OpenPaymentMandate → PaymentMandate → PaymentReceipt) encoded as SD-JWT verifiable credentials, enabling AI agents to make payments within clearly defined constraints with full auditability. Mastercard has integrated AP2 across its $9T+ annual network volume to support agentic commerce. Coinbase x402 enables HTTP-native micropayments with 75M+ monthly transactions across Base, Polygon, Arbitrum, World Chain, Solana, and Ethereum, allowing AI agents to pay for API access and digital services in a single HTTP round-trip. Browser-commerce agents (OpenAI ChatGPT agent mode, Anthropic computer-use) bypass structured payment APIs and execute checkout flows autonomously, a governance gap that Veriproof fills with session-wrapping and mandate verification. The GENIUS Act (Pub. L. 119-27, signed July 18, 2025) established the first US federal framework for payment stablecoins, requiring 1:1 reserves in cash and T-bills and federal licensing for issuers above $10B AUM. EU MiCA (Regulation 2023/1114, full enforcement 2026) requires CASPs and stablecoin issuers to hold national competent authority authorization and appear in the ESMA Interim Register. FedNow and RTP carry ISO 20022 pacs.008 instruction reference requirements for all AI-initiated real-time payments. Veriproof captures evidence at each mandate step, validates constraints via OPA policy, anchors to Solana, and issues W3C VC Payment Mandate certificates, providing the governance certification layer that AP2 merchants, acquirers, and regulators require.

Vocabulary file

• Download filename: 14_vertical_agentic_payments_and_stablecoins.json
• Kind: vertical

OTel namespaces

Referenced standards

These references explain the catalog's context. A listed standard does not establish that a configured application meets its requirements.

• Google AP2 v0.2, Agent Payments Protocol (mandate chain SD-JWT wire format, W3C VC issuance)
• Coinbase x402, HTTP-native stablecoin micropayment protocol (PAYMENT-REQUIRED / PAYMENT-SIGNATURE / PAYMENT-RESPONSE headers)
• GENIUS Act (Pub. L. 119-27, signed July 18, 2025), First US federal payment stablecoin framework; §4 reserve requirements and licensing thresholds
• EU MiCA (Regulation 2023/1114), Markets in Crypto-Assets Regulation; ART/EMT token classification; CASP authorization; full enforcement 2026
• ISO 20022, Universal financial industry message scheme (pacs, pain, camt families for FedNow/RTP/SEPA Instant)
• FedNow, Federal Reserve real-time payment service ISO 20022 profile; launched July 2023
• W3C Verifiable Credentials Data Model 2.0, AP2 mandates as SD-JWT verifiable credentials; Veriproof issues Payment Mandate VDC
• IETF SD-JWT (draft-ietf-oauth-selective-disclosure-jwt), Selective disclosure JWT wire format for AP2 mandate chain
• PCI DSS v4.0, Payment Card Industry Data Security Standard; Requirement 10 (audit logging), Requirement 6.3 (approved software)
• FATF Recommendations (updated 2023), AML/CFT; Recommendation 15 (new technologies / virtual assets); applies globally
• EU AI Act (Regulation 2024/1689), Transparency and high-risk classification for AI payment systems
• EU DORA (Regulation 2022/2554), Digital Operational Resilience Act; applies to PSPs and CASPs operating in the EU
• BSA / FinCEN, Bank Secrecy Act SAR and transaction monitoring obligations for AI-initiated stablecoin payments

Source references

• https://goo.gle/ap2 
• https://docs.cdp.coinbase.com/x402/core-concepts/how-it-works 
• https://en.wikipedia.org/wiki/GENIUS_Act 
• https://www.esma.europa.eu/esmas-activities/digital-finance-and-innovation/markets-crypto-assets-regulation-mica 
• https://www.iso20022.org/iso-20022-message-definitions 
• https://explore.fednow.org/resources/readiness-guide-iso-20022.pdf 
• https://www.w3.org/TR/vc-data-model-2.0/ 
• https://datatracker.ietf.org/doc/draft-ietf-oauth-selective-disclosure-jwt/ 
• https://www.pcisecuritystandards.org/document_library/ 

Subdomains

Control ideas

These patterns describe possible controls, not active rules. Confirm applicability, implement the control, and test its effect on the application.

Enforce before the action

Pass the request and your business action to this function. The core SDK checks policy before the action runs and again before its result is released. A deny or review decision means the action never runs.

import { Veriproof } from '@veriproof/sdk-core';
import type { GovernedResult, IndustryFact, JsonValue } from '@veriproof/sdk-core';

const veriproof = Veriproof.fromEnv();

export async function runProtectedAction<TInput extends JsonValue, TValue>(
  request: TInput,
  action: (input: TInput, signal: AbortSignal) => Promise<TValue>,
): Promise<GovernedResult<TValue, TInput>> {
  // Catalog values for this vertical. Replace them with facts from the current workflow.
  const industry: IndustryFact[] = [
    { attribute: "agentic_payments.mandate.type", policyInput: "agentic_payments_mandate_type", value: "open_payment" },
    { attribute: "agentic_payments.mandate.status", policyInput: "agentic_payments_mandate_status", value: "pending" },
    { attribute: "agentic_payments.mandate.modality", policyInput: "agentic_payments_mandate_modality", value: "human_present" },
  ];

  // Policy runs before action() and again before the result is released.
  // A deny or review decision means action() never runs.
  return veriproof.govern(
    "agentic.payments.and.stablecoins.evaluate",
    request,
    ({ input, signal }) => action(input, signal),
    { industry },
  );
}

• Replace the sample values with facts from the current workflow. Rules read them under input.snapshot.industry.
• Test both permitted and blocked actions. Confirm that a blocked action never reaches your business function.
• Only completed, completed_with_warning, and transformed results carry a released value.

For review decisions, follow the Human Review guide to configure continuation. Observe remains available when you need to record activity without enforcing a decision.

Set up the Agentic Payments & Stablecoins example. See the API reference for TypeScript, Python, or .NET.

Selected vocabulary categories

This page uses the vocabulary JSON distributed with the documentation. Check its version when comparing it with an installed SDK.

Download the vocabulary JSON for offline review or automated comparisons.

Use the SDK reference for configuration and supported APIs. Keep vocabulary selection separate from the compliance team's assessment of applicable requirements.