Authorize one agent action. Charge it once. Prove what happened.
An agent proposes a purchase. It cannot authorize it. The purchase is governed by an operator-issued permit through Agent Middleware: one accepted idempotency key means at most one dispatch and at most one ledger debit — never a duplicate charge, not always a charge. Only then does a PayPal Sandbox order exist. Replay the action and watch the counters refuse to move.
No proposal yet.
No run yet.
No replay yet.
Ledger debits: – · PayPal orders: – · Credits charged: –
No receipt yet.