AP2.

An IntentMandate declares the user's ceiling: item set, max amount, validity. The cart is bound to the intent at construction time.

Ap2Validator::validate_with_delegation_and_policy enforces (1) AP2 cart constraints, (2) TDIP DelegationScope, (3) runtime SpendingPolicySnapshot. All three must approve.

tenzro_ap2ValidateMandatePair({
  intent_mandate: { ... },
  cart_mandate: { ... }
})

Validated mandate pairs are persisted against the controller DID and read back with tenzro_listMandates. Pass the controller DID; the node returns the mandates authorized under it. This is the read path a wallet uses to show a user which agents currently hold consent.

tenzro_listMandates({ controller_did: "did:tenzro:human:…" })
// -> {
//   count: number,
//   mandates: [{
//     mandate_id, agent_did, merchant_did,
//     description, max_amount, asset, expires_at
//   }]
// }