Merchants are defining acceptable agent boundaries before the infrastructure is fully standardized, which means networks and issuer processors building agentic authorization rails risk encoding assumptions about delegation scope that merchants will reject at scale. Operators need merchant consent frameworks and tokenized credentialing architectures finalized now, not after agent-initiated transaction volumes force costly retrofits.