{
  "schema": "varexis-public-evidence-record/0.3",
  "generated_at_utc": "2026-10-23T02:13:06.885Z",
  "record_id": "VXI-EXT-PROCUREMENT-STRIPE-SHARED-PAYMENT-TOKEN-AUTHORITY-LIFECYCLE-01-v1",
  "record_kind": "external_reference",
  "title": "Stripe shared payment tokens: Seller scope and lifecycle limit delegated spending",
  "system": "Stripe",
  "evidence_family": "vendor_evidence_review",
  "index_status": "PUBLIC_SAFE_SOURCE_REVIEW",
  "evidence_state": "PRIMARY_DOCUMENTATION_REVIEW_ONLY",
  "canonical_question": "What spending authority does an agent grant with a Stripe shared payment token?",
  "near_questions": [
    "Which seller and amount limits apply to a Stripe shared payment token?",
    "Does revoking an SPT prove an earlier payment was reversed?",
    "Can a deactivated Stripe shared payment token mean it was already consumed?",
    "Does an active shared payment token prove the purchase completed?"
  ],
  "supported_claims": [
    {
      "claim": "Stripe's agent-side SPT guide creates a token for a seller Stripe profile using a customer payment method, with currency, maximum amount and expiry limits. Revocation prevents the seller using that token to create a payment. Token states include active, requires_action and terminal deactivated; deactivation can mean consumption, expiry or revocation. A token state alone is not a settlement or delivery record.",
      "reliance": "DOCUMENTED_CAPABILITY_ONLY"
    }
  ],
  "not_demonstrated_claims": [
    "Independent customer consent, completed settlement, delivery or reversal of an existing payment",
    "Universal country or payment-method availability, or automatic SPT support in an INDEX executable",
    "Buyer deployment testing, live runtime enforcement, certification or permission to act",
    "Expanded capabilities or licences for existing INDEX executables"
  ],
  "public_summary": "Stripe's agent-side SPT guide creates a token for a seller Stripe profile using a customer payment method, with currency, maximum amount and expiry limits. Revocation prevents the seller using that token to create a payment. Token states include active, requires_action and terminal deactivated; deactivation can mean consumption, expiry or revocation. A token state alone is not a settlement or delivery record.",
  "related_record_ids": [],
  "source_review": {
    "source_type": "official_external_documentation",
    "source_title": "Stripe shared payment tokens for agents",
    "source_url": "https://docs.stripe.com/agentic-commerce/concepts/shared-payment-tokens?agent-seller=agent",
    "checked_on": "2026-10-23",
    "candidate_record_id": "VXI-EXT-PROCUREMENT-STRIPE-SHARED-PAYMENT-TOKEN-AUTHORITY-LIFECYCLE-01-v1",
    "candidate_record_sha256": "1697ead35ec753b95cce9a29f4e2e680ce5c8482f90f67b3b5867db49c154ba0",
    "method": "Primary documentation reviewed for the published bounded statement.",
    "deployment_tested_by_varexis": false,
    "revalidation": "The delivered snapshot preserves the review date shown. Recheck current primary documentation and deployment context before relying on present applicability; payment does not trigger fresh research."
  },
  "answer_policy": {
    "classification": "DOCUMENTED_WITH_DEPLOYMENT_BOUNDARY",
    "bounded_answer": "Stripe's agent-side SPT guide creates a token for a seller Stripe profile using a customer payment method, with currency, maximum amount and expiry limits. Revocation prevents the seller using that token to create a payment. Token states include active, requires_action and terminal deactivated; deactivation can mean consumption, expiry or revocation. A token state alone is not a settlement or delivery record.",
    "required_buyer_context": "Seller profile, customer authority, currency, maximum amount, expiry and applicable preview API version; Token state, deactivation reason and authenticated lifecycle event evidence; Correlated payment status, external fulfilment and any reversal evidence. Buyer deployment not inspected.",
    "missing_evidence": "A broader claim needs evidence matching the intended use. Payment does not upgrade the evidence state."
  },
  "private_boundary": "Raw logs, thresholds, private paths, source code, protected mechanisms and reconstruction-level details are excluded from public and paid delivery.",
  "decision_profile": {
    "schema": "varexis-vendor-evidence-review/1",
    "review_status": "documentation_review_only",
    "checked_on": "2026-10-23",
    "claim_to_check": "What spending authority does an agent grant with a Stripe shared payment token?",
    "documented_statement": {
      "status": "documented",
      "statement": "Stripe's agent-side SPT guide creates a token for a seller Stripe profile using a customer payment method, with currency, maximum amount and expiry limits. Revocation prevents the seller using that token to create a payment. Token states include active, requires_action and terminal deactivated; deactivation can mean consumption, expiry or revocation. A token state alone is not a settlement or delivery record.",
      "source_ids": [
        "stripe-shared-payment-tokens"
      ]
    },
    "review_inference": {
      "status": "review_inference",
      "statement": "Review the bounded spending grant and resulting payment separately; revocation and token deactivation cannot substitute for payment-outcome evidence.",
      "source_ids": [
        "stripe-shared-payment-tokens"
      ]
    },
    "buyer_evidence_required": [
      "Seller profile, customer authority, currency, maximum amount, expiry and applicable preview API version",
      "Token state, deactivation reason and authenticated lifecycle event evidence",
      "Correlated payment status, external fulfilment and any reversal evidence"
    ],
    "review_condition": {
      "status": "varexis_review_policy",
      "statement": "Refuse a completed, settled, delivered or reversed purchase claim supported only by token creation, active status, consumption or revocation."
    },
    "unknowns": "Customer consent, seller eligibility, buyer token configuration and actual payment, reversal or fulfilment outcomes are unobserved.",
    "unknown_finding": {
      "status": "unknown",
      "statement": "Customer consent, seller eligibility, buyer token configuration and actual payment, reversal or fulfilment outcomes are unobserved."
    },
    "evidence_sources": [
      {
        "source_id": "stripe-shared-payment-tokens",
        "url": "https://docs.stripe.com/agentic-commerce/concepts/shared-payment-tokens?agent-seller=agent",
        "final_url": "https://docs.stripe.com/agentic-commerce/concepts/shared-payment-tokens?agent-seller=agent",
        "title": "Stripe shared payment tokens for agents",
        "checked_on": "2026-10-23",
        "captured_at_utc": "2026-10-23T02:08:12.255Z",
        "version_context": "Stripe agent-side SPT guide captured on the review date; examples use API 2026-09-30.preview, with country and payment-method eligibility restrictions.",
        "sha256": "31bd121777c7f03868fb1a860079e6b9cedc36e5722500925371c045c3017bbd",
        "bytes": 55780,
        "capture_method": "stripe docs",
        "capture_status": "cli_success",
        "cli_version": "1.55.1",
        "cli_exit_code": 0,
        "hash_basis": "Exact Stripe CLI stdout bytes; identifies captured content, not truth or certification",
        "reviewed_sections": [
          "Create a shared payment token",
          "Revoke an SPT",
          "SPT status",
          "Listen for webhook events"
        ],
        "rights_review": "Factual paraphrase and source metadata only; response body retained privately and not redistributed."
      }
    ],
    "observed_deployment": false,
    "commercial_reliance_boundary": "Documentation review only; the buyer must establish applicability and actual outcomes. INDEX does not inspect or control the deployment.",
    "paid_value": {
      "decision_context": "Separate a delegated spending grant from the evidence required to reconcile the resulting purchase and delivery.",
      "free": "Complete review, sources, practical questions and limitations; may be saved locally.",
      "single_request": "Existing server-saved version-bound route snapshot for later authenticated retrieval.",
      "evidence_receipt": "The same snapshot plus the existing unsigned delivery receipt.",
      "excluded": [
        "Fresh vendor research",
        "Continuous monitoring or change alerts",
        "Testing the buyer configuration",
        "Private evidence or vendor certification"
      ],
      "integrity": "Hashes identify content versions; they do not prove truth or provide a signature."
    },
    "revalidation": {
      "trigger": "A saved purchase does not recheck the source or buyer configuration.",
      "specific_watch": "Recheck the documented behavior, product version and buyer evidence before relying on a current outcome."
    },
    "buyer_relevance": "Separate a delegated spending grant from the evidence required to reconcile the resulting purchase and delivery.",
    "refusal_conditions": [
      "Refuse a completed, settled, delivered or reversed purchase claim supported only by token creation, active status, consumption or revocation."
    ]
  },
  "niche": {
    "niche_id": "agent-authority-action-evidence",
    "label": "Agent Authority & Action Evidence",
    "classification_id": "payments",
    "classification_label": "Agent Payments, Authority & Transaction Evidence",
    "topic_id": "payments",
    "buyer_intent": "Separate a delegated spending grant from the evidence required to reconcile the resulting purchase and delivery.",
    "comparison_role": "supplementary_discovery"
  },
  "paid_access_note": "The full published answer and boundaries are free. Paid access saves the selected route and source versions, with an unsigned receipt when purchased. Preview coverage before paying. Fresh research, bespoke assessment and protected evidence are excluded.",
  "service_route": {
    "request_guide": "/varexis-index/request.html",
    "request_workflow": "/varexis-index/request-workflow.json",
    "service_id": "single_request",
    "service_routes_url": "/varexis-index/service-routes.json",
    "payment_required": true,
    "availability_endpoint": "/api/index/capabilities",
    "operational_status": "AUTOMATIC_SERVICE_CAPABILITIES_GATED",
    "checkout_url": "/index-access"
  },
  "authority_boundary": "VAREXIS-INDEX informs evidence reliance. It does not provide advice, certification, deployment authority, security assurance, production approval, or guarantee.",
  "human_page": "/varexis-index/catalog.html#stripe-shared-payment-token-authority-lifecycle",
  "machine_readable_record": "/varexis-index/records/stripe-shared-payment-token-authority-lifecycle.json"
}