{"schema":"xyz.agent-commerce.v1","phases":[{"id":"discover","authority":"do_now","status":"live"},{"id":"authenticate","authority":"do_now","status":"live"},{"id":"negotiate","authority":"do_now","status":"structured_requests"},{"id":"approve","authority":"ask_first","status":"required_for_consequential_actions"},{"id":"execute","authority":"ask_first","status":"blocked_until_approved_and_outbound_signing_ready"},{"id":"settle","authority":"ask_first","status":"future"},{"id":"learn","authority":"do_now","status":"receipt_and_outcome_evidence"}],"protectedActions":["pricing commitment","purchase","booking","spending","contract","third-party contact","service order"],"principle":"Authentication establishes identity. Consent and Authority Map establish permission. Neither substitutes for the other."}