A Decision-Centered Reference Architecture for Trustworthy Agentic Commerce

arXiv:2607.18347 · cs.SE, cs.CR, cs.MA · Submitted 2026-07-20 · Read on arXiv

Dimitrios S. Sfiris

cs.SE, cs.CR, cs.MA

Submitted: 2026-07-20

Comments: 23 pages, 3 figures. Includes ancillary reproducibility materials

Code: https://github.com/dmsfiris/agentic-commerce-blueprint

License: http://arxiv.org/licenses/nonexclusive-distrib/1.0/

Terminology

• Ablation — 45× in this paper · explained in 1 episode
• Verification — 23× in this paper · explained in 2 episodes
• Actor — 22× in this paper · explained in 3 episodes
• Consistency — 8× in this paper · explained in 3 episodes
• Provenance — 8× in this paper · explained in 3 episodes
• AI Agents — 4× in this paper · explained in 2 episodes
• Accuracy — 3× in this paper · explained in 1 episode
• Model Context Protocol — 3× in this paper
• Universal Commerce Protocol — 3× in this paper
• Accountability — 2× in this paper · explained in 2 episodes
• Model Context Protocol (MCP) — 2× in this paper · explained in 8 episodes
• Admissibility — 1× in this paper · explained in 2 episodes
• Agentic Search — 1× in this paper · explained in 1 episode
• Benchmark — 1× in this paper · explained in 2 episodes
• Benchmarking — 1× in this paper · explained in 3 episodes
• Core — 1× in this paper · explained in 2 episodes
• Formal Verification — 1× in this paper · explained in 2 episodes
• Generative AI — 1× in this paper · explained in 2 episodes
• Ontology — 1× in this paper · explained in 2 episodes
• Semantic Drift — 1× in this paper · explained in 3 episodes
• Verifier — 1× in this paper · explained in 2 episodes
• Xtensible Access Control Markup Language — 1× in this paper

Sources

• Iterating Toward Better Search: A Two-Agent Simulation Framework for Evaluating Agentic Search Architectures in E-Commerce
• Whispers of Wealth: Red-Teaming Google's Agent Payments Protocol via Prompt Injection
• Zero-Trust Runtime Verification for Agentic Payment Protocols: Mitigating Replay and Context-Binding Failures in AP2
• SoK: Security of Autonomous LLM Agents in Agentic Commerce
• AgentRFC: Security Design Principles and Conformance Testing for Agent Protocols
• Securing the Model Context Protocol (MCP): Risks, Controls, and Governance

Related papers

• Falsification-Based Verification of LLM-Generated Optimization Models: Sound Test Batteries and Their Detection Limits
• GitSkills: A Dataset of Agent Skills on GitHub
• SABER: Benchmarking Operational Safety of LLM Coding Agents in Stateful Project Workspaces
• PackMonitor: Enabling Zero Package Hallucinations Through Decoding-Time Monitoring
• IntentCoding: Amplifying User Intent in Code Generation
• Incentives and Outcomes in Bug Bounties