Signing the Transaction but Not the Decision: Whisper Attacks and a Binding Defense for AP2
A-VIP (AP2 Verified-Intent Protection), a protocol-layer defense that treats the signed intent as a capability grant rather than judging the merchant's description, is introduced, to address this attack vector.