Mathew PaquetChecklist · 4 min read
The Paper Trail Checklist
The four checks to run before an AI agent pays your suppliers, and the one record per payment that shows what you asked for, what you approved and what you got.
On October 15, 2026, Wix announced that Symphony, its team of AI agents for small businesses, can pay through Link, Stripe's wallet: restock inventory, settle supplier invoices, pay an event entry fee. You approve each payment in the Link app, within ten minutes, from any device. Two days earlier, American Express published a way to record what you told an agent to buy.
Both keep a record of what you approved. That record cuts both ways: the approval screen shows a merchant, a purchase and an amount. It doesn't tell you the invoice is the right one, that the supplier is the one you meant, or that the bank details haven't been swapped. If you tap yes on the wrong thing, the record says you approved exactly that.
As Wix describes it, Symphony shows you the merchant, what it's buying and the exact amount at checkout. Link then creates a one-time card or token capped at that amount, so the agent never sees your real card number. Wix writes: "a new total or a new shop always requires a new yes."
Amex's vice president of agentic partnerships, Hannah Bozian, told TechCrunch that a log of what was authorized, by which agent, and when, can help address fraud. Make that log yours. If a payment is ever disputed, this is how you show the difference between what you approved and what you got.
Agent: [WHICH AGENT OR TOOL ASKED]
What I asked for: [YOUR INSTRUCTION, IN YOUR WORDS]
What I approved: [MERCHANT] / [ITEM] / [AMOUNT]
The invoice: [INVOICE NUMBER, FILE OR LINK]
Statement line: [THE LINE ON YOUR CARD STATEMENT]
Match? [YES / NO: WHAT DIFFERS]
Four things, every time. What you asked for, what you approved, the invoice, and the line on your statement. If one is missing, you can show that you said yes, but not what you meant.
Nobody's announcement settles who pays when an agent buys the wrong thing. Wix's post and press release say nothing about refunds, disputes or who is liable, and neither does Stripe's announcement. Amex says that in the future it will protect eligible customers from charges caused by a registered agent's error, if Amex receives your approved intent; it says full terms will come later and lists U.S. credit cards. The federal card rule limits what you owe only for use that nobody authorized, and credit used mainly for business is exempt from most of that regulation, so for a business card a lot comes down to your card agreement.
I use [CARD NAME, LAST FOUR DIGITS] with an AI agent that pays for my business
through [WALLET OR APP]. If an AI agent I connected makes a purchase I approved,
and it's wrong, what am I covered for?
Please answer in writing. Thank you,
[YOUR NAME]
Not legal advice. No ruling was found on whether an agent you connected, and whose payment you approved, counts as having your authority. Treat your card agreement and the issuer's written answer as the rule that applies to you.
Sources
Mathew's LibraryLibrary card
Keep reading free with your library card
One email opens this checklist and all 3 resources in Mathew's library. No account, no password.
Before you approve the next payment an agent asks for, open the invoice yourself and match the payee and the amount to it.
Saving works best in your phone's browser. A copy is also in your inbox.