Every transaction leaves three traceable authorisation records: Intent (what was allowed) → Cart (what was bought) → Payment (how the money moved) · 每一笔交易都留下三层可追溯的授权记录
Why does a human have to confirm? · 为什么需要「人确认」？After the agent places an order the status is
PAYER_ACTION_REQUIRED — a human must complete the payment on PayPal before money moves.
That is MandatePay's security design, not a defect: the AI cannot spend behind your back,
and the final authorisation stays with the human (human authorises, machine executes).
· 这是 MandatePay 的安全设计，不是缺陷。AI 不能偷偷花钱，最终授权权在人手里。