arXiv cs.CR·16d agoSigning the Transaction but Not the Decision: Whisper Attacks and a Binding Defense for AP2#agentic-payments#agent-security#ap2AI safety & security2