Charge A
Her agent asked, within her terms
Reading it from PayPal…
PayPal sandbox demo
When a shopper says “my AI bought that,” PayPal reviews the transaction itself. Nothing in that review records what she actually let her agent buy. Readback puts that record on PayPal's own rails: she approves her agent's limits once on PayPal, her agent signs every purchase, and a dispute is checked against both.
Charge A
Reading it from PayPal…
Charge B
Reading it from PayPal…
Reading both charges from PayPal, then re-checking them in your browser. Two real charges on her sandbox agreement, read from PayPal just now as if she disputed each one. The rules are the same for both sides: a signed request inside her approved terms protects the seller; a charge her agent never asked for protects the buyer.
Demo affordance: in step 1 this browser tab holds a temporary agent key that can't be exported and disappears when you close the tab. In production the key lives only in the shopper's agent runtime.
Your tab becomes the agent. You approve its terms on PayPal's own sandbox page, signed in as the judge sandbox buyer from the Devpost testing instructions.
Ask Claude to shop: it asks your agent (this tab) to sign, and only what fits your terms gets signed. Or buy in one click.
Ask Claude to shop opens after step 1, once your tab is the approved agent.
Charge your own agreement directly, every term respected, but with no request from your agent.