An autonomous agent just bought from a real Shopify store, and the money was safe
Today an autonomous AI agent walked into a real store, picked out a product, proved who it was, checked out, and paid. The store is LARUCE Beauty, a live Shopify business. No human clicked anything. The agent did the whole job, end to end, and the payment settled over x402B, Boson Protocol's escrow exchange mechanism, on Base mainnet.
Boson Protocol names Facet a launch partner for x402B, and this purchase is a working example of what it makes possible. We are sharing it because it answers the question everyone in agent commerce keeps circling: when a machine spends money on its own, how do you know the deal is safe?
What happened, step by step
The agent arrived at LARUCE the way any buyer would, except it was software acting on its own. First it proved its identity. It did this with a Facet KYA token, Facet's own agent-identity credential, so the store could confirm it was dealing with a real, accountable agent and not an anonymous script. Then it browsed, added a product to the cart, and went to checkout. At checkout, the payment ran over x402B on Base, and the funds went into escrow.
That escrow is the whole point. The money does not land in the merchant's account the instant the agent pays. It is held, and it releases when the order is fulfilled. If the buyer gets what it paid for, the merchant gets paid. If not, the money comes back. Buyer protection, built into the rail.
How the pieces fit
The clean way to understand this is to separate two jobs.
Facet is the operator layer. We are the face a business turns toward machines. We give the store a storefront an agent can actually use, and we give the agent an identity the store can trust. That is the arrival and the handshake: the agent shows up, proves it is real with a Facet KYA token, and gets to work.
Boson handles the part that has always been hard between two parties who have never met: making the deal safe. x402B is escrow as an exchange mechanism. It holds the funds and releases them on fulfillment, so neither side has to trust the other on faith. Boson announced x402B on mainnet, and Facet is a launch partner running live on top of it.
Storefront and identity from Facet. Escrow and settlement from Boson. Together, a complete purchase that a machine can drive and a merchant can rely on.
Why this matters
Agent-to-Business (A2B) commerce has had a trust gap. We can build agents that browse, decide, and pay, but a merchant taking money from an unknown machine, and a buyer sending money to a store it has never dealt with, both need a reason to proceed. Reputation and chargebacks are human-scale tools. They do not map cleanly onto software that transacts in seconds.
Escrow closes that gap with mechanism instead of promises. The merchant knows the money is real and committed. The buyer knows the money releases only on delivery. Identity through an open standard means the agent is accountable, not anonymous. That is the difference between a demo and infrastructure you can run a business on.
Look at it yourself
We built this to be inspected, not just announced. Facet's SDK is open source and public at github.com/facet-llc/sdk under Apache-2.0, and it includes the Boson escrow payment-rail adapter. The integration that settled this purchase is right there to read, fork, and run.
We are also opening LARUCE as a public storefront for the agent-commerce community to build against. If you are building an agent that needs to prove identity, check out, and pay with real buyer protection, you now have a live store to point it at.
Read the SDK, send your agent to LARUCE, and see a purchase settle over x402B for yourself. This is the operator layer for Agent-to-Business commerce, and it is live today.