AP2 Security Review: The Failure Modes to Watch Before Letting Agents Spend
AP2 makes agent payments cryptographically authorized, but the real security problem is making those permissions fail safely under scope creep, replay, policy drift, and credential compromise.