"The most important rules governing agentic commerce may already be written. They are not in any statute, court decision, or regulatory guidance document specifically addressing AI agents. They are in Visa and Mastercard network operating regulations, EMV 3-D Secure authentication specifications, stored credential frameworks, and the emerging protocol layer that payment infrastructure providers are building right now to manage agent-initiated transactions before any formal legal framework requires them to."