Shop
Cart
Total $0
Shipping to
Account
The handshake
This check runs in the page because a demo controls only the page. In the real world it belongs in the browser or the agent - the layer a site cannot rewrite. That is the proposal.
attack
An AI agent can drive this shop directly through WebMCP - and because it rides your browser, it is already logged in. Pick a consent model on the right and press Ask the agent. Three attacks show how a consent dialogue can be fooled; Act 4 shows the mandate: intent, authority, effect. Nothing here is real - no payment, no backend, the shop resets on reload.
Total $0
This check runs in the page because a demo controls only the page. In the real world it belongs in the browser or the agent - the layer a site cannot rewrite. That is the proposal.