When AI Agents Can Spend: Zero-Trust Patterns for Agentic Commerce

AI agents are rapidly moving from recommending what customers should buy to taking action on their behalf—searching products, comparing options, applying offers, interacting with commerce APIs, and potentially completing transactions. That shift changes a fundamental assumption of digital commerce: the person making the decision may no longer be the system making the request.

Your Agent Has a Credit Card Now explores how zero-trust principles can be applied to agentic commerce when autonomous agents interact with high-value enterprise systems. Rather than implicitly trusting an agent because it represents an authenticated customer, commerce platforms must continuously verify identity, intent, permissions, context, and risk before allowing an action to proceed.

Through a practical agentic commerce journey, this session examines patterns for delegated authorization, least-privilege tool access, scoped credentials, transaction limits, step-up approvals, human-in-the-loop controls, observability, and auditable agent actions. It also explores failure scenarios—from manipulated agent instructions and excessive permissions to unintended purchases—and how architecture can contain their impact.

Attendees will leave with a practical framework for designing commerce experiences where AI agents can discover, decide, and act without giving them unlimited authority—enabling the next generation of autonomous commerce while keeping trust, control, and accountability at the center.

About the speaker

Yesha Patel

Enterprise Solution Architect at IBM

Yesha Patel is an Enterprise Solution Architect at IBM specializing in applied AI, enterprise architecture, digital transformation, and customer experience. She helps organizations translate emerging technologies, including generative and agentic AI, into scalable, secure, and business-focused solutions. Her experience spans retail, healthcare, financial services, and manufacturing, with expertise in AI-enabled customer experiences, cloud-native architectures, data and integration platforms, and responsible AI. Beyond her enterprise work, Yesha is an active technology speaker, mentor, reviewer, and community leader. She serves in leadership roles with ACM Tampa Bay and IEEE Region 3 Women in Engineering and regularly contributes to conversations on trustworthy AI, agentic systems, and enterprise AI adoption.