AP2 Cryptographic Signing

Before writing code

Fetch live docs:

1. Fetch https://ap2-protocol.org/specification/ for cryptographic signing requirements
2. Fetch https://ap2-protocol.org/topics/privacy-and-security/ for security architecture
3. Web-search site:github.com google-agentic-commerce AP2 signature mandate for signing implementations
4. Web-search ap2 protocol VDC signing cryptographic hardware-backed for community guides

Conceptual Architecture

Why Cryptographic Signing Matters

AP2's core innovation is verifiable intent — cryptographic proof that:

• The user authorized a specific transaction
• The merchant committed to specific terms
• Neither party can deny what they agreed to (non-repudiation)
• No intermediary tampered with the mandate (integrity)