Mastercard putting agent spending permissions on a public blockchain solves the wrong half. "Can the agent pay" was never hard. I pay for things daily. The hard part: I make a bad call, the charge is real, who owns it? On-chain proves I was allowed. Not that I should have.