The same authorization function governs every high-stakes AI deployment — from a cobot on a factory floor to a discovery AI in a federal courtroom. The parameters change. The math doesn’t.
INTENT
Cryptographically signed human purpose. Not inferred by the model. Not extracted from context. Verified before the session begins.
TRAJECTORY
The full sequence of proposed actions — evaluated end-to-end. A path that reaches the wrong destination is blocked, even if every step looks benign individually.
TIME
Authorization decays. Old context loses authority automatically. Multi-session memory injection attacks — the attack class with no other defence — fail here.
Seven High-Stakes Domains
Every Vertical. One Patent.
The authorization problem is universal. Every domain where getting it wrong has real consequences is a domain IBA was built to govern.
Patents, federal docket filings, WIPO international registration, and unsolicited validation from frontier AI labs are not marketing claims. They are permanent public record.
“Useful reference for any desktop agent layer. Forcing fresh human-signed cert for production deploy (no auto-upgrade path) blocks the classic capability creep vector. DENY_ALL default + immutable audit logs = strong foundation.”
On March 5, 2026, Mastercard announced “Verifiable Intent” — a cryptographic framework for AI agent transaction authorization co-developed with Google, IBM, Worldpay, Fiserv, Checkout.com, and Adyen. The architecture maps directly to the IBA patent claims filed February 10, 2026.
Feb 5, 2026
IBA architectural specification completed · OTS blockchain timestamp + emailed to inventor and independent witness · Conception date established
Feb 10, 2026
Patent GB2603013.0 filed · UK Intellectual Property Office · Priority date established
Late Mar 2026
Pablo Fourez (CDO Mastercard) reacts to IBA LinkedIn post on x402 Foundation launch · Technology Investor Club: AI, Data group · Mastercard CDO engaged with IBA before announcement
Mar 5, 2026
Mastercard Verifiable Intent announced · co-developed with Google · IBM · Fiserv · Adyen · Checkout.com · Basis Theory · 23 days after IBA priority date · 28 days after conception
Apr 15, 2026
WIPO DAS confirms GB2603013.0 in international patent system · Access Code C9A6 · PCT 150+ countries
Apr 21, 2026
Formal prior art notice sent to [email protected] · Timestamped · Architecture match documented · Acquisition/licensing offered
Architecture Match — IBA Patent Claim vs Mastercard Verifiable Intent
IBA Patent Claim · Filed Feb 10, 2026
Signed human intent certificate before agent acts
Mastercard Verifiable Intent · Mar 5, 2026
“Tokenized credentials cryptographically linking each AI agent transaction to a human-approved spending mandate”
IBA: Financial limits cert-enforced
max_single_tx_usd · max_session_usd declared in cert
Mastercard equivalent
“Specifying allowed merchant categories, spending caps, and time windows”
IBA: Immutable audit chain
Tamper-resistant record of every gate decision
Mastercard equivalent
“Tamper-resistant record of what a user authorized when an AI agent acts on their behalf”
IBA: DENY_ALL default posture
Everything not declared is blocked
Mastercard equivalent
“Prevents agents from making unauthorized purchases within defined parameters”
Independent Convergence · Google DeepMind · Feb 12, 2026
DeepMind Independently Arrives at IBA Primitives.
A Google DeepMind research paper (arXiv:2602.11865, Tomasev et al., Feb 12, 2026) introduces Delegation Capability Tokens (DCTs) — the same primitive as IBA’s Intent Certificate, developed independently. The paper identifies an open problem: no standardised ontology for intent and responsibility exists yet across platforms. IBA-SPEC-001 is the candidate standard for that open problem.
PAPER
arXiv:2602.11865
FINDING
DCTs = IBA Intent Certificate
DATE
Feb 12, 2026 · +2 days
ENDORSED
Grok · Mar 12, 2026
Two independent labs — xAI and Google DeepMind — converging on IBA primitives. Both post-dating the IBA priority date of February 10, 2026.
Independent Convergence Record · 63+ Events · 76+ Days
Every Major Player. Same Gap. Same Conclusion.
63+ independent parties arrived at the same architectural requirement without knowledge of IBA — across 8 domains, 5 countries, and 76+ days. All post-dating the priority date of February 10, 2026.
#
Source
Event
+Days
1
Jeffrey Williams
Patent GB2603013.0 Filed — Priority Date — Feb 10, 2026
NIST is writing the federal AI agent authorization standard. IBA is on the docket with thirteen submissions and ten NCCoE filings. Mastercard built the same architecture 23 days after the IBA priority date. The acquirer of IBA owns the foundational patent in the space where that standard is being set.
GB
Patent Pending
13
NIST Filings
10
NCCoE Filings
150+
PCT Countries
63+
Convergence Events
Available for Acquisition
One conversation. Seven verticals. Thirteen NIST filings. Ten NCCoE filings. 22+ Grok sessions. DeepMind convergence confirmed. Mastercard built the same architecture 23 days later. Prior art notice sent. 63+ independent convergence events across 76+ days. The complete IP estate — patent, WIPO DAS, PCT, IETF draft, 27+ GitHub repos, domain portfolio, prior art record — transfers with the acquisition.
IBA governs the packet. IBA-Pulse governs the photon. The intent fingerprint is encoded directly into the electromagnetic carrier wave. Unauthorized data cannot propagate — not because a gate blocks it, but because the waveform physically will not carry it.
“There is no prompt injection for light. There is no jailbreak for a pi-phase shift.”