Introduction¶
Status: Informative in full. This page orients a reader; it states no requirement. Every rule it mentions is normative in the specification document it links to, and where this page and a specification document disagree, the document is the definition.
What A202 specifies¶
A202, the Verifiable Agreement Protocol for Agent-Led Commerce, specifies how two independent organisations, or the software agents acting for them, reach commitments that either side can later prove: who had authority to act, what was offered and agreed, what is owed, what was disclosed to whom, and how any of it is verified from the record alone.
The full statement of purpose, scope, non-goals, and design principles is the charter. The adversaries the specification assumes and the properties it defends are the threat model.
The three layers¶
flowchart TB
subgraph objects ["Commercial objects: what things mean"]
direction LR
M[Mandate] ~~~ O[Offer] ~~~ AG[Agreement] ~~~ OB[Obligation] ~~~ EV[Evidence] ~~~ D[Determination]
end
subgraph state ["Transaction state: what may happen next"]
direction LR
TA[Transaction aggregate] ~~~ NS[Negotiation sessions] ~~~ SE[Signed events] ~~~ DR[Disclosure rules]
end
subgraph verify ["Verification: how anyone checks"]
direction LR
CB[Canonical bytes] ~~~ SG[Signatures] ~~~ RP[Replay] ~~~ CS[Conformance suite]
end
objects --> state --> verify
Commercial objects. Typed objects carry commercial meaning on a common envelope: delegated authority as a commercial mandate, the terms of a deal as an offer and an agreement, what is owed as an obligation, what was proven as evidence, and what was decided as a determination. Domain vocabulary enters through transaction profiles without changing the kernel.
Transaction state. Two state machines govern movement: one for the transaction aggregate and one for each bilateral session inside it, with guarded transitions, per-stream concurrency, and replay rules, in the transaction state machine. Event semantics and disclosure rules for competitive bidding are in auction event semantics. Parties with no prior presence enter one named transaction through a counterparty invitation.
Verification and conformance. Every object canonicalises to exact bytes and every commitment is a signature over them, per the canonical commercial model. The conformance suite turns the rules into 148 executable fixtures, and role scopes name the surface a grade covers. Settlement is handed off to payment rails as an authorised instruction, per the settlement handoff.
How to read the documents¶
Every document carries a status header stating which of its sections are
normative and which are informative. The normative keywords MUST,
MUST NOT, SHOULD, and MAY are used in the RFC 2119 sense, and only
inside sections marked normative.
Schema validity is necessary and not sufficient: an implementation that passes every schema and violates an invariant of the canonical model is not conformant. That gap is why the conformance suite exists, and running it is two commands, described in the schemas overview.
A reading order¶
- The charter, for what this is and what it deliberately is not.
- The canonical commercial model, for the object model, the envelope, and the invariants schema validation cannot express.
- The transaction state machine, for what moves state and what does not.
- The conformance manifest, for the fixtures that decide whether an implementation agrees with either of the above.
Every normative change that produced the current text landed under a numbered proposal, and the proposals are published so the record of why the specification says what it says is public.