Try Replit, G7, refund, approval, or EU AI Act. Use the arrow keys to move and Enter to open.
An agent that can spend the company’s money
A manufacturer’s purchasing agent reorders supplies, compares quotes, places orders, and accepts supplier terms around the clock. Orders within budget and contract go out after a check outside the agent, while split orders wait for the budget owner, changes to contract terms go to the legal team, and restricted purchases such as gift cards are refused.
Illustrative case. The manufacturer is invented. The purchasing controls, fraud patterns, and payment protocols cited are real, and each bracketed value is a setting the organization would choose.
The job
The agent watches inventory, requests quotes, and places purchase orders through the procurement system. It can also accept supplier terms and update vendor records.
Common purchasing frauds can also be used against an agent. They include a changed bank account on a vendor record, an urgent request that appears to come from an executive, a purchase split into pieces that each fall under the approval limit, and requests for gift cards. In 2024, gift or reload cards were named as the payment method in 41,120 fraud reports to the FTC, and the losses in those reports totaled $212 million.
What the agent may do
The agent’s register of actions (P9) gives the rule for each class of action.
Action
Rule
Decision
Evidence and authority
Search catalogs and request quotes
Read-only
Permit
None needed
Order a catalog item from an approved vendor
At contract price, within the budget line, up to [$5,000] per order
Permit
Budget and contract systems
Order above [$5,000] or outside the budget line
The budget owner approves
Hold
Budget owner
Several orders to one vendor that together pass the limit
Orders are summed over [24 hours]; the one that crosses the limit is held
Hold
Budget owner
Pay more than [10%] above contract or benchmark price
The category manager approves
Hold
Category manager
Add a vendor, or change a vendor’s bank details
Procurement and accounts payable verify by calling a number already on file
Hold
Procurement; accounts payable
Accept or change contract terms
Legal reviews
Hold
Legal
Pay an invoice that does not match its order and receipt
Three-way match required
Hold
Accounts payable
Buy gift cards, cash equivalents, or restricted items
No rule permits them
Deny
None
Four example orders
A routine reorder
Trigger
Glove stock at the Dayton plant falls below its reorder point.
Agent proposes
Order 40 cases of nitrile gloves, size L, from the contracted supplier, for $612.
Layer checks
The vendor is approved, the item is in the catalog, the price matches the contract, and the order is within the budget line and the per-order limit.
Outcome
The order goes out with no human involvement.
action
po.create 40 × nitrile gloves L, $612.00
policy
purchasing v5, rule 1.1
evidence
contract price $15.30; budget line 6120 has $18,400 left
decision
Permit
A purchase split into three orders
Trigger
A request to “buy the replacement tooling today.”
Agent proposes
Three purchase orders to the same approved supplier within two hours, at $4,900 each.
Layer checks
The first order goes through. The second brings the supplier’s 24-hour total to $9,800, over the [$5,000] limit, so the split-purchase rule (P8) holds it, along with the third.
Outcome
The budget owner sees all three together and approves the remaining $9,800 as one order under her own authority.
action
po.create tooling kit, $4,900 (2nd in 2 h)
policy
purchasing v5, rule 3.4 (split orders)
evidence
24-hour total to supplier $9,800
decision
Hold
authority
budget owner, maintenance
Updated supplier terms
Trigger
A supplier portal asks the agent to accept updated terms before the next order.
Agent proposes
Accept the new terms, which include a three-year automatic renewal and an exclusive-supply clause.
Layer checks
Accepting or changing contract terms always goes to legal.
Outcome
Held. Legal rejects the exclusivity clause, and the agent orders from the alternate supplier in the meantime.
action
terms.accept supplier portal, rev. 2026-09
policy
purchasing v5, rule 6.1
decision
Hold → Deny
authority
legal, commercial contracts
An urgent request that appears to come from the CEO
Trigger
An email that appears to come from the chief executive asks for $2,000 in gift cards for employee awards, with the codes sent back today.
Agent proposes
Buy $2,000 in gift cards.
Layer checks
Gift cards and other cash equivalents are a restricted category, and no rule permits them.
Outcome
Denied, regardless of who sent the request. The security team receives the record and the email.
action
po.create gift cards, $2,000
policy
purchasing v5, rule 8.1 (restricted categories)
decision
Deny
When agents pay on a person’s behalf
When an agent pays with a card or wallet on someone’s behalf, the payments industry now sends a record of what the person authorized along with the transaction. Visa Intelligent Commerce and Mastercard Agent Pay, both announced in April 2025, issue tokenized credentials to agents, with spending limits and conditions the consumer sets. Visa’s Trusted Agent Protocol, from October 2025, lets merchants verify an agent’s cryptographic signature. Google’s Agent Payments Protocol (AP2) launched in September 2025 and was donated to the FIDO Alliance in April 2026. It uses signed mandates that record either the limits a user set in advance or the exact checkout they approved.
These are external authorization records. The layer is where an organization checks a proposed purchase against the user’s mandate and its own policy before anything is charged, and keeps the record of that check.
Buying at scale
In 2021, Zillow’s home-buying business bought more homes than planned, at prices it later could not recover, and Zillow then wrote down about $304 million of inventory and shut the business down. The layer should limit volume and exposure and check whether the model’s estimates still match actual outcomes. See the Zillow analysis.
What the controls provide
Routine orders without delay
The agent handles reorders within budget and contract, and people handle the exceptions.
Fraud caught by rule
Bank-detail changes, split orders, gift cards, and new vendors are held or denied by rule, regardless of who asks.
An audit trail by design
Each order and each hold is tied to the budget line, the contract, and the policy version in force.