Your next customer is an AI agent. So is your next fraudster.

FLINT is fraud and financial-authority infrastructure for the agentic economy. When an AI agent attempts a consequential action or payment, FLINT checks the available identity, principal, mandate, runtime, wallet, and reputation evidence, returns a verdict, and signs a record of the decision.

Agentic fraud is abuse in which an AI agent, its credentials, tools, delegation chain, or transaction context is manipulated to take an action its principal did not authorize. The agent can remain valid while its behavior, payee, amount, or purpose changes, which is why authentication alone is not enough.

Know Your Agent is the practice of establishing which agent is acting, which person or organization is accountable for it, what authority it holds, and whether the current action fits that authority. KYA complements human KYC; it does not replace customer identification or legal compliance obligations.

A signature can prove which agent sent a request, but not that its principal approved this payee, amount, tool, or moment. A hijacked, misconfigured, or over-delegated agent may keep valid credentials. FLINT checks the action against the mandate at execution time.

Six layers: Principal Identity, Agent Identity, Wallet Provenance, Authorization Scope, Environment Identity, and Cross-Merchant Reputation. Evidence may be verified, observed, unavailable, or conflicting; FLINT preserves those distinctions instead of treating missing data as fraud.

Keep the bot controls. Agent protocols and signatures can identify recognized automation; FLINT adds financial authority and transaction context so a merchant can distinguish an agent with permission to buy from a valid agent making an unauthorized purchase. FLINT Sentry provides advisory agent-commerce intelligence for Shopify merchants.

ALLOW means the evidence supports the action; STEP-UP asks for more proof; REVIEW identifies signals needing human or policy review; BLOCK means strong evidence says the action should not proceed. FLINT Verify returns the decision to the integrating system, which chooses enforcement. FLINT Sentry never stops or modifies Shopify orders.

No. FLINT can evaluate an agent without one. A Passport provides durable agent identity, binds it to an accountable principal and declared mandate, and gives trust evidence a stable place to accumulate across sessions, deployments, and counterparties.

A signed verification record is a tamper-evident receipt of what FLINT checked, what was observed or unavailable, which rules ran, and which verdict was returned for a specific action. FLINT uses hybrid signing (ES256 plus ML-DSA-65) so the record can be independently verified through the post-quantum transition. It is evidence, not a guarantee of a chargeback, insurance, or regulatory outcome.

No. FLINT sits between agent identity and financial action. It is rail-agnostic, holds no funds, and is designed to work alongside card and stablecoin rails, x402, API and MCP flows, device intelligence, blockchain analytics, IAM, sanctions screening, and transaction monitoring. FLINT adds agent authority, execution-time context, and signed evidence; regulated institutions remain responsible for their risk-based programs and filing decisions.