Preprint
Sep 2026
Signing the Transaction but Not the Decision: Whisper Attacks and a Binding Defense for AP2
A-VIP (AP2 Verified-Intent Protection), a protocol-layer defense that treats the signed intent as a capability grant rather than judging the merchant's description, is introduced, to address this attack vector.
Yedidel Louck, Amit Dvir, Ariel Stulman
· 0 citations