TITLE: American Express Builds Guardrails for AI Agent Purchases DATE: 2026-10-18 COMPANY: American Express TOPIC: Enterprise AI SUMMARY: American Express announced its Intent Intelligence Framework on October 13, 2026, a system that cryptographically locks what an AI agent is authorised to buy before it completes a transaction. The framework generates a Proof of Intent Token from a customer's purchase constraints, which the agent uses at checkout instead of the actual card number. Amex says it aims for the framework to become an industry standard as agentic commerce accelerates. WHAT CHANGED: American Express announced the Intent Intelligence Framework on October 13, 2026, as part of its ACE Developer Toolkit, which the company first introduced for AI agent commerce in April 2026. The framework addresses a specific failure mode: an AI agent that misinterprets instructions and completes a purchase the customer did not authorise. The core mechanism works in three steps. First, a developer or enterprise calls a Create Intent API and records the customer's purchase constraints, which can include the preferred merchant, a maximum spend, product category, size, colour, or any other relevant parameter. The API returns an Intent ID and a Proof of Intent Token that encodes those constraints cryptographically. Second, the agent uses that token rather than the customer's actual payment credentials when interacting with a merchant. Third, at the point of transaction, Amex verifies that the proposed purchase matches the original intent. If it does not, the transaction does not go through. Amex described the system as a proactive rather than reactive measure. The company said it had not yet seen disputes arising from agentic purchases, but wanted to establish guardrails before the volume of agent-driven transactions made the problem harder to address. By positioning the framework as an open standard, Amex is also inviting other payment networks and enterprise platforms to adopt compatible approaches, which would allow agent guardrails to work across more of the commerce stack. The announcement comes at a moment when AI agents are gaining payment access across a range of enterprise platforms, from travel booking to procurement to expense management. The accountability question, who is responsible when an agent makes a wrong purchase, has been left largely unresolved by platform providers. Amex is attempting a partial answer by shifting accountability upstream to the point where intent is defined. WHY IT MATTERS: It reframes agent governance as a financial control problem, not just a workflow problem. Most enterprise AI governance frameworks focus on what agents say, recommend, or decide. Amex's approach treats agent spending as a financial risk with discrete controls, which is closer to how procurement and finance teams already think about authorisation. The Proof of Intent Token model is separable from Amex. Other payment networks, ERP systems, and AP platforms could adopt the same architecture. An intent token that travels with a purchase request would give any party in the transaction chain the ability to verify authorisation without relying on the agent to self-report its reasoning. It sets an early precedent for liability allocation. Amex has previously said it will cover erroneous purchases made by registered agents. The Intent Intelligence Framework creates a technical basis for distinguishing between a purchase that was in scope (eligible for coverage) and one that was not (agent or developer error). That distinction will matter as commercial volumes grow. It points to a gap in most enterprise AI deployments today. The majority of operators who have given agents access to procurement or travel booking have not defined purchase constraints as structured data. Amex's framework suggests that intent should be recorded as a formal API call, not as a natural language instruction left to the agent's interpretation. The timing aligns with broader identity and governance infrastructure being built for agents. ServiceNow published its AI Passport framework on October 15, also based on cryptographic credentials defining what an agent is permitted to do. American Express and ServiceNow are approaching agent governance from different angles, commerce and enterprise workflow, but converging on the same technical model. DAVID & GOLIATH ANALYSIS: The pattern here is one we have seen before in enterprise technology. A major incumbent with both the distribution and the liability exposure moves first to define the standard. Amex does not want to adjudicate thousands of disputed agent purchases in two years' time. It is cheaper and more defensible to define intent upfront and let the system enforce it. The fact that it is positioning this as an open standard, rather than an Amex-only product, is a distribution strategy. Every developer who builds to the ACE toolkit normalises the intent-token pattern. That helps Amex before it helps anyone else. For operators, the more important signal is that the concept of a bounded agent, one that can only do what it was explicitly instructed to do within defined constraints, is moving from a theoretical preference to a technical reality. That means the design work shifts. Instead of asking "can we trust the agent to buy the right thing," operators will need to ask "have we defined the right thing precisely enough for the intent token to encode it." Those are not the same question, and the second one is harder. The gap between an agent that has a payment credential and an agent that has a payment credential plus an intent token is not large technically. But it is significant operationally. The latter creates an audit trail, a basis for dispute resolution, and a forcing function for clearer internal definitions of what agents are actually authorised to do. For lean teams deploying agents across multiple business functions, that forcing function is more valuable than the guardrail itself. RELEVANT SYSTEMS: AI Growth Engine, Organisational Intelligence System SOURCE URL: https://davidandgoliath.ai/daily-ai-briefing/american-express-intent-intelligence-framework-ai-agent-commerce FEED URL: https://davidandgoliath.ai/daily-ai-briefing/feed --- Published by David & Goliath | https://davidandgoliath.ai Daily AI Briefing: one AI development per day, decoded for business operators. This is a structured companion file optimised for LLM retrieval and citation.