OpenChainGraph Suite · ART-30 · Wave 6 · Agent Commerce Cross-Protocol Conformance Validator
v1.0.0

Agent Commerce Cross-Protocol Conformance

The synergy flagship of Wave 6. Validate a single agent purchase end-to-end across all four layers: AP2 v0.2 mandate chain (Intent → Cart → Payment), ACP checkout conformance (OpenAI/Stripe), Visa TAP RFC 9421 HTTP Message Signature inspection, and x402 settlement leg. Issues one unified PASS/WARN/FAIL verdict and a single OpenChainGraph execution_hash receipt (chain_depth: 1, parent hashes from ART-01 + ART-12 + ART-03). Client-side. Zero PII.

AP2 Export Chain Depth: 1 AP2 v0.2 ACP · OpenAI / Stripe Visa TAP · RFC 9421 x402 Zero PII payment_mandate
↑ ART-01 AP2 Mandate Chain ↑ ART-12 ACP Checkout ↑ ART-03 x402 Settlement
🔒 All validation runs entirely in your browser. Do not paste live payment credentials, wallet private keys, customer PII, or production signing keys. Use test / stub fixtures only. No data is transmitted.
Stage 1 — AP2 v0.2 Mandate Trio (required)
AP2 Mandate Trio
JSON object: { intent: {...}, cart: {...} (optional), payment: {...} }. Paste the output of ART-01 policy_parameters.mandate_trio, or build manually.
Stage 2 — ACP Checkout Payload (optional)
ACP CheckoutRequest or CheckoutResponse
Paste an ACP payload from ART-12, or select a preset. Leave blank / select Skip to omit this layer.
Stage 3 — Visa TAP RFC 9421 HTTP Message Signature (optional)
Signature-Input + Signature headers (RFC 9421)
JSON: { "Signature-Input": "sig1=(...);alg=...", "Signature": "sig1=:base64value:" }. Inspects header structure — no cryptographic verification (keys not in browser).
Stage 4 — x402 Settlement Leg (optional)
x402 Payment Header Body
JSON from an HTTP 402 response body: { scheme, network, maxAmountRequired, asset, payTo, extra: { resource } }. Paste the output of ART-03 output_payload.x402_payload, or build manually.
Stage 5 — MPP Session Leg (optional)
Tempo Machine Payments Protocol session
JSON for a Tempo MPP pre-authorization: { mode: "charge|session|subscription", session_id, max_amount, currency, payee, cadence (subscription), expires_at (session), access_key }. Leave blank to skip — validated only when supplied.
Parent execution_hash values (recommended — anchors chain_depth: 1)

Paste the execution_hash from the upstream ART-01, ART-12, and ART-03 runs. Leave blank if running standalone (chain_depth stays 0).

H1 — ART-01 AP2 Mandate Chain hash
H2 — ART-12 ACP Checkout hash
H3 — ART-03 x402 Settlement hash
Unified Verdict
Protocol Checks
OpenChainGraph Artifact · execution_hash
SHA-256: —

Computed client-side via WebCrypto SHA-256 over cgCanon({policy_parameters, output_payload}). Parent hashes: none