As agents become buyers, a merchant needs one verdict before transacting: is the agent's credential valid, the action in scope and under its limit, the agent reputable enough — and does the value need a human in the loop? This composes EcoCloud's identity, limit, and reputation primitives into approve · step-up · decline. EcoCloud verifies and gates; Visa / Stripe / Mastercard move the money.
Honest scope. A deterministic, signable governance primitive — the merchant-facing composition of the UAID credential, the signing-limit, and the reputation kernels. step-up means "route to a human" (the responsible default for high-value / irreversible agent transactions), not "pay". EcoCloud is the KYA / trust layer in agentic commerce — it verifies and gates the agent; it issues no money and is not a payment rail (signature verification of the credential still happens against the JWKS via existing crypto). Source: flowdesk-kya-kernel.js.