The idea being to make sure that a payment credential has been requested by a legitimate chain and only then provide a single-use token (or similar).
Is there anyone working on agents that can consummate transactions out there who is thinking about this area that might like to chat? Email address is in my profile if so.