构建可验证的支付系统,让智能体交易前先证明完成任务再付款。
TessPay: Verify-then-Pay Infrastructure for Trusted Agentic Commerce
- 用'验证后付款'机制替代默认信任,分三阶段确保交易可信。
- 任务执行时资金冻结,生成加密证据,只有验证通过才放款。
- 支持跨链支付,保留防篡改审计日志,适合自动化交易场景。
全球经济正进入智能体商业时代,自主代理可发现服务、议价并完成交易。然而当前系统仍基于直接人机交互设计,缺乏支撑代理操作的核心机制。在任务委托阶段,无法将用户意图转化为明确范围、发现合适代理并安全授权;支付结算阶段在任务执行前处理,缺乏可验证的工作证据;审计机制未能记录完整交易生命周期,导致争议时责任不清。尽管已有标准解决部分问题,仍亟需统一基础设施来覆盖全交易流程。为此,我们提出TessPay,一种采用'验证后付款'架构的统一基础设施。其双平面设计将控制与验证分离于结算。TessPay在四个阶段实现可信:事前,代理注册于权威目录,用户意图以可验证指令形式留存,保障责任追溯;执行中,资金存入托管,代理执行任务并生成加密证据(如TLS Notary、TEE等),支持任务执行证明(PoTE);结算时,系统验证证据,仅当满足预设验证条件才释放资金,模块化轨道适配器使该托管机制兼容异构支付通道;事后,系统保存防篡改审计轨迹,便于争议解决。该框架为智能体商业提供端到端可信支撑。
原文摘要 · Abstract (English)
The global economy is entering the era of Agentic Commerce, where autonomous agents can discover services, negotiate prices, and transact value. However adoption towards agentic commerce faces a foundational trust gap: current systems are built for direct human interactions rather than agent-driven operations. It lacks core primitives across three critical stages of agentic transactions. First, Task Delegation lacks means to translate user intent into defined scopes, discover appropriate agents, and securely authorize actions. Second, Payment Settlement for tasks is processed before execution, lacking verifiable evidence to validate the agent's work. Third, Audit Mechanisms fail to capture the full transaction lifecycle, preventing clear accountability for disputes. While emerging standards address fragments of this trust gap, there still remains a critical need for a unified infrastructure that binds the entire transaction lifecycle. To resolve this gap, we introduce TessPay, a unified infrastructure that replaces implicit trust with a 'Verify-then-Pay' architecture. It is a two plane architecture separating control and verification from settlement. TessPay operationalizes trust across four distinct stages: Before execution, agents are anchored in a canonical registry and user intent is captured as verifiable mandates, enabling stakeholder accountability. During execution, funds are locked in escrow while the agent executes the task and generates cryptographic evidence (TLS Notary, TEE etc.) to support Proof of Task Execution (PoTE). At settlement, the system verifies this evidence and releases funds only when the PoTE satisfies verification predicates; modular rail adapters ensure this PoTE-gated escrow remains chain-agnostic across heterogeneous payment rails. After settlement, TessPay preserves a tamper-evident audit trail to enable clear accountability for dispute resolution.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。