The Next AI Infrastructure Battle Isn’t Identity. It’s Liability.

Amazon blocked Meta’s Muse from completing purchases. The bigger problem isn’t whether agents can act—it’s who stands behind them when they act incorrectly.

The Next AI Infrastructure Battle Isn’t Identity. It’s Liability.

TL;DR

  • Amazon blocked Meta's Muse AI shopping agent due to unauthorized access and security concerns, including potential credential capture.
  • The core issue is not whether AI agents can act, but who is accountable when they err, moving beyond identity and authorization to liability.
  • The agentic internet complicates accountability because actions involve a chain: human instruction, agent interpretation, tool execution, payment processing, and merchant fulfillment.
  • Existing efforts like Google's AP2 and Cloudflare's Wallets address agent identity and authorization but not the ultimate liability.
  • Verifiable claims (identity, authority) via protocols like Agent Facts are useful but don't resolve who pays when an agent misunderstands instructions or makes a bad decision.
  • Amazon blocked Muse, viewing it as an unauthorized intermediary, while Shopify allowed it, seeing it as a potential source of commerce through Shop Pay.
  • The definition of a trustworthy agent may ultimately depend on the institutions willing to accept its risk, leading to a market of private arrangements rather than a universal trust layer.