The rule
The agent never pays. The operator does.
Orders are never charged automatically. An agent can only prepare a draft; a human operator must open the approval link, review the cart and pay via Stripe Checkout.
Every price is recomputed on the server from the product configuration — at quote, at draft, and again when the operator pays. A price sent by a client is ignored, so an agent cannot invent, discount or inflate a total.
- No card, no wallet and no account is ever exposed to an agent.
- A prompt injection can, at worst, produce a draft nobody approves.
- Drafts expire after 7 days and are signed — they cannot be edited in transit.
- The paid order is written by the same Stripe webhook that handles the shop.