{
  "id": "authorization-payment-composition",
  "title": "Dedicated AEP carrier composes with payment credentials",
  "description": "AEP authenticates before MPP or x402 and leaves unrelated payment credentials untouched.",
  "drafts": ["draft-kavian-agent-enrollment-protocol-04"],
  "category": "protected-resource",
  "applicability": {
    "agent": {
      "expectation": "required",
      "profile": "core-http"
    },
    "platform": {
      "expectation": "unsupported"
    },
    "service": {
      "expectation": "required",
      "profile": "core-http"
    }
  },
  "input": {"anonymous_status": 401, "anonymous_challenge": "AEP"},
  "expected": {"mpp": {"AEP-Authorization": "AEP compact-jws", "Authorization": "Payment mpp-credential", "ambiguous": false}, "x402": {"AEP-Authorization": "Bearer opaque-token", "PAYMENT-SIGNATURE": "x402-signature", "ambiguous": false}, "payment_advertised_after_aep": true}
}
