OpenAI and Google discuss AI safety standards using payments industry models
Anthropic, Google, and OpenAI are in discussions to establish an industry body for AI testing and auditing, potentially adopting technical frameworks from the payments sector. The initiative aims to create standardized requirements for agentic AI and cybersecurity evaluations, drawing on models like FIDO and EMVCo.
Key Takeaways
- The proposed industry body would define technical requirements for cybersecurity evaluations and agentic AI interactions.
- FIDO Alliance is currently developing an Agentic Authentication Technical Working Group to standardize how users delegate actions to AI agents.
- EMVCo released a draft Agentic Payments Framework in September to manage consumer instructions through an Intent Services layer.
- Google DeepMind CEO Demis Hassabis has proposed pre-release testing for frontier models to identify dangerous capabilities and safeguard bypasses.
Why It Matters
Establishing technical benchmarks for AI agents mirrors the evolution of contactless payments, where EMVCo specifications enabled interoperability across different hardware and software providers. For the streaming and tech ecosystem, these standards will determine how AI agents securely handle transactions and user data without constant manual oversight. The shift from broad trust questions to verifiable technical requirements like public-key cryptography is essential for scaling agentic commerce. Watch for whether these developers can agree on a unified auditing body or if fragmented state-level safety requirements in regions like Massachusetts and Illinois force a more complex compliance landscape.
Additional Context
The push to formalize AI safety standards for agentic systems is gaining momentum across multiple industry bodies simultaneously. In June 2026, the FIDO Alliance published its Agentic Payments Framework, defining cryptographic verification requirements for AI agents initiating transactions without human confirmation, establishing a technical baseline that the proposed AI auditing body could extend into broader agent behavior testing. The framework specifies how agents must present verifiable credentials before executing payment actions, mirroring the way FIDO2 and WebAuthn already eliminate password dependency for human authentication. This positions FIDO's existing infrastructure as a natural reference architecture for any new AI governance consortium.
EMVCo has moved in parallel, publishing its Contactless Kernel Specification updates in early 2026 that address multi-party transaction flows, a category that directly overlaps with agentic commerce scenarios where AI agents negotiate, authorize, and settle payments autonomously. Mastercard announced in May 2026 that it had completed pilot integrations of its Agent Payments Protocol with three major e-commerce platforms, demonstrating that the payments industry is already operationalizing the interoperability layer that AI developers now seek to replicate for safety auditing. The commercial pressure is clear: if payment networks ship agent-ready rails before AI companies agree on testing standards, the compliance burden falls on developers to retrofit rather than co-design.
The technical architecture question mirrors a debate already playing out in telecom network automation, where competing vendors have taken divergent approaches to AI governance. Nokia launched an agentic AI framework for IP network operations within its Network Services Platform in June 2026, marking its third agentic product announcement in four weeks, while simultaneously partnering with AWS and Databricks to build a unified data and control layer for autonomous networks. Nokia claims operators using its autonomous networks portfolio are achieving automation rates above 90 percent and service delivery times under four hours. Ericsson launched its AI in RAN commercial software subscription on June 11, 2026, claiming up to 20 percent higher downlink throughput across more than 15 live deployments using existing baseband silicon. These parallel efforts in telecom illustrate the fragmentation risk that the aims to prevent: without shared verification protocols, each vendor builds proprietary assurance mechanisms that cannot interoperate, precisely the problem EMVCo solved for contactless payments two decades ago.
Read full article at pymnts.com
Enjoy our coverage?
Add StreamingMeme as a preferred source on Google to see more of our streaming news at the top of your Search results.
Add as preferred source