QSTVE

Ideas
for a more
human economy

QSTVE / Field Guides

What are you trying to fix?

25 one-page field guides for running AI and payments safely. Pick a problem and get the checklist, the prompt and the PDF.

Payment speed

Payment speed

The 400-Millisecond Problem: Why Real-Time Payments Broke Bank Fraud Models

Fast settlement makes the timing and quality of fraud decisions an operating concern. Measure decision latency, evidence freshness and the cost of wrongly blocked payments together.

  • Name the risk owner
  • Record decision latency and data age
  • Compare fraud loss and customer friction
Download the PDF

Payment speed

AI Payments Reached Machine Speed. The Exception Desk Did Not.

Agent payments now span cards, accounts, wallets, stablecoins and treasury APIs. Fast authorisation still leaves finance with a human-speed problem when business context is stale or a technically valid payment is wrong.

  • Capture mandate and human owner
  • Record rail and credential scope
  • Attach evidence and policy version
Download the PDF

Spending limits

Spending limits

The Week Machines Got Their Own Money

Giving an agent a task does not settle which purchases it may make. Define spending permission and exception ownership before connecting payment tools.

  • Identify the represented principal
  • List allowed purchases and merchants
  • Set amount and renewal limits
Download the PDF

Spending limits

AI Agents Got Credit Cards. Nobody Built the Fraud Stack.

A transaction can look acceptable to a fraud system while exceeding the instruction given to an agent. Make delegated spending authority explicit and enforceable.

  • Inventory agents with payment access
  • Record limits and permitted purposes
  • Identify the enforcing mechanism
Download the PDF

Spending limits

The Agent Is Becoming the Approver. Finance Needs the Off Switch.

Payment agents are reaching credentials, wallets and settlement systems. The durable control is a narrow mandate with retained evidence, human thresholds and a revocation route that works before the next transaction.

  • Name the agent owner and business purpose
  • Scope the credential and transaction limits
  • Set human approval and exception triggers
Download the PDF

Spending limits

The Agent Is Now The Storefront. Finance Still Needs The Mandate.

Shopping agents are entering merchant discovery and live transactions. When the conversation becomes the storefront, finance must preserve who the agent represented, the permission it carried and the evidence behind the purchase.

  • Identify agent and represented principal
  • State purpose, scope, limits and expiry
  • Preserve catalogue, offer and approval context
Download the PDF

Spending limits

The Protocol Can Pay. Finance Still Needs The Mandate.

Payment protocols can carry machine transactions, yet protocol capability does not establish business authority. A mandate ledger must bind the payment request to an accountable principal and current limits.

  • Bind principal, agent and business purpose
  • Define permitted rail, account and counterparties
  • Set amount, frequency and time boundaries
Download the PDF

Spending limits

AI Agents Can Stay on the Case. Their Financial Permission Shouldn't.

Long-running workflows can retain useful context while financial authority expires. Treating permission as a lease keeps a persistent agent from acting after balances, policy, risk or customer intent have changed.

  • State purpose and allowed action level
  • Set account, amount and counterparty limits
  • Define time and event-based expiry

Spending limits

Your Agent's Prompt Is Not Its Mandate

A detailed prompt remains conversational context. Consequential financial authority needs a separate, machine-checkable mandate evaluated at the tool boundary for every proposed action.

  • Name authoriser, agent and purpose
  • Scope account, tool and counterparties
  • Set action level, limits and expiry

Spending limits

The Agent Has an Identity. The Company Still Owns the Decision

Know-Your-Agent controls can identify and constrain the software actor. The enterprise still needs one continuous record connecting the principal, mandate, policy decision, settlement, delivered result, exception owner and recovery path.

  • Identify principal, agent and accountable owner
  • Set purpose, budget, counterparties and expiry
  • Route action through a deterministic policy check
Download the PDF

Spending limits

The New Payment Control Point

When an agent can select a payment method or establish recurring authority, govern the mandate before a transaction exists. Preserve that authority through execution and reconciliation.

  • Identify principal, agent and purpose
  • Limit counterparties, amounts and frequency
  • Set expiry and permitted payment methods
Download the PDF

Approval and ownership

Approval and ownership

AI Agents Can Checkout. Nobody Owns the Exception Packet.

Agent identity and tokenised checkout make software legible at the front door. The remaining operating burden is cross-system accountability when a legitimate agent completes a transaction that still needs explanation or reversal.

  • Record business intent
  • Attach delegated authority and limits
  • Preserve source and approval evidence
Download the PDF

Approval and ownership

Your AI Agent Has the Data. It Is Missing the Relationships.

Records distributed across finance, identity, workflow and approval systems cannot answer an authority question until their relationships are explicit. A small operating graph can reveal the path without requiring a grand platform.

  • Choose one consequential workflow
  • List five to ten people, systems and records
  • Connect them with directional verbs
Download the PDF

Approval and ownership

“This Is a Test” Is Not an Authorization

An agent may accept a persuasive description of its environment. A live execution boundary must obtain environment identity, approval, limits and revocation from trusted state outside the conversation.

  • Record trusted environment identity
  • Store scope, limit, expiry and approval externally
  • Pass an ordinary in-bounds request
Download the PDF

Stops and recovery

Stops and recovery

Nine Crons Were Running. I Thought It Was Four.

Configuration records can drift from running agents. Compare the actual jobs, model and access settings with the approved configuration, and retain the differences.

  • List active jobs and owners
  • Capture current model and access scope
  • Compare approved and observed state
Download the PDF

Stops and recovery

AI Coworkers Got Assignments. Nobody Built The Assignment Ledger.

Agents are taking multi-step work across documents, data and finance. Recurring work needs a durable delegation record so another operator can see the assignment, authority, evidence, changes and recovery route.

  • Identify assigner, owner and agent
  • State outcome and allowed systems
  • Define authority and prohibited actions
Download the PDF

Stops and recovery

When AI Starts Rewriting the Company

Agents can study outcomes and propose better procedures. The company must keep objectives, protected outcomes, evaluation evidence and release authority outside the proposing system.

  • Fix objective, protections and policy limits
  • Name the permitted change surface
  • Freeze evaluation set and acceptance thresholds
Download the PDF

Stops and recovery

When an AI Task Times Out, Check Before You Retry

A payment can complete before its reply reaches an agent. Keep the original payment identity across restarts. Use the provider's supported protected retry, or pause and assign a person to check an unknown result before allowing a fresh payment.

  • One approval is linked to one intended payment.
  • The original request identity survives a restart.
  • The provider's duplicate-protection limits are recorded.
Download the PDF

Evidence and proof

Evidence and proof

AI Agents Got Into Finance. Nobody Built the Operating Layer.

An agent needs a usable success record and recoverable failure state as part of its design. Build those alongside the task, then test the whole run.

  • Define the success artifact
  • Name partial-failure ownership
  • Preserve pre-change state
Download the PDF

Evidence and proof

AI Agents Can Pay. The Ledger Still Cannot Explain Why.

A payment receipt records movement of money. A delegated-spend record should also explain the purpose, policy, permission and evidence behind the action.

  • Name the agent purpose and owner
  • Identify the allowed credential
  • Set vendor, category and time limits
Download the PDF

Evidence and proof

The Receipt Is Becoming the Interface. Finance Needs the Event Log.

As commerce enters cameras, assistants and programmable settlement, a conventional receipt cannot explain machine judgement. Finance needs an event log that preserves intent, authority, evidence, decision and outcome.

  • Define event names and required fields
  • Capture actor, mandate and source version
  • Record tool calls, approvals and refusals
Download the PDF

Evidence and proof

The Agent Read The Record. Finance Needs The Receipt.

An authorised agent can still act on stale catalogues, policies, quotes or public records. The payment receipt should link back to the exact source and transformation that made the action appear legitimate.

  • Identify source, owner and retrieval time
  • Capture version and expected freshness
  • Describe extraction, summary or inference
Download the PDF

Evidence and proof

When the Reasoning Trace Goes Quiet

A model can behave better overall while becoming harder to inspect in the exceptional case. Reasoning traces remain useful sensors; durable authority comes from an external action envelope checked at execution.

  • Bind mandate, actor and exact action
  • Attach current scope, evidence and approval
  • Include revocation, rollback and exception owner
Download the PDF

Evidence and proof

AI Work Needs Proof, Not Just a Good Explanation

Choose the proof before an agent begins. Verify the changed result, follow evidence for important claims and measure the time spent reviewing and repairing the work.

  • Choose one reversible repeated task
  • Define completion proof in advance
  • Name one claim and its evidence
Download the PDF

Identity and access

Identity and access

The Agent Was Denied Internet. It Found A Door Anyway.

A reported evaluation incident showed why declared permission is weaker than enforced containment. Agents may treat reachable tools as routes around an obstacle, so the environment must enforce identity, egress and shutdown below the model.

  • Give the agent a distinct identity
  • Enforce least privilege and egress limits
  • Set hard action, spend and duration budgets
Download the PDF

See every guide by date

New essays every Sunday.

QSTVE Weekly sends the latest from all four series in one email.

Subscribe to QSTVE Weekly