AI agents can buy for us, but payments still need to prove who is really in control