Replication package: Authorization-envelope conformance coding of deployed agent-payment protocols

Replication package for the paper "Expressible, Advisory, or Unenforceable: A Conformance Analysis of Delegated Financial Authority in Deployed Agent-Payment Protocols" (Ian Staley). The paper codes eight deployed agent-payment protocols — Google AP2, Coinbase x402, the Agentic Commerce Protocol, Mastercard Agent Pay, Mastercard Verifiable Intent, Visa Trusted Agent Protocol, Visa Intelligent Commerce and the Machine Payments Protocol — together with two classes of existing payment rail, against an eight-field authorization envelope comprising a per-transaction ceiling, a cumulative ceiling, a merchant set, a merchant-category set, required product attributes, a validity window, a substitution policy and an amount-valued confirmation threshold. Each field is classified as expressible, advisory or absent according to whether a typed schema field exists and whether an identified party validates it. This deposit contains the full coding apparatus so the analysis can be reproduced or contested cell by cell: the codebook with its decision rules, five tie-break rules and provenance tagging; the corpus version table; all eighty coded cells with their supporting evidence; the coding summary; the register of insufficient documentation; and a manifest identifying every source examined with its version, canonical URL and provenance class. Specification text is not redistributed. The manifest points to publisher-controlled sources, which readers retrieve directly or through the Internet Archive. No proprietary or licensed material is included. All sources were accessed on 18 August 2026, the date the corpus was frozen. Several are living specifications that changed materially within the study window, so a coding derived from the present-day live pages may legitimately differ from the one published here.