05 - The EU Agentic Commerce Window — what Brussels has, what's missing, and 2 August 2026

Episode 5: "The EU Agentic Commerce Window — what Brussels has, what's missing, and 2 August 2026"In seventy days, the EU AI Act enters its applicability phase. Article 50 transparency obligations, Annex III high-risk classifications, and the full Title III stack land on 2 August 2026. And most of the agent-to-agent commerce being built right now sits in a regulatory zone the AI Act doesn't actually cover end-to-end.This is Field Report N°1 — a different series than the five research preprints. It's built for the policymakers, MEP staffers, in-house counsel, and serious builders who need to know, concretely, what Brussels has, what's missing, and where the consultation windows still are.We walk through the six-step lifecycle of an EU agentic transaction: a principal establishes a mandate (GDPR Art. 22 territory), a software agent acts on it (AI Act risk tiering, Tier 2 for high-risk like mortgage decisions, Tier 3 for limited-risk like booking flights), it interacts with a venue (DSA, DMA), value moves over a payment rail (PSD3, SEPA Instant, MiCA, all requiring Strong Customer Authentication that was never designed for a software "customer"), finality lands (settlement neutrality), and a record persists (GDPR Art. 15 audit trail). At each step we name the dominant EU instrument and the gap underneath it.Three gaps in particular get unpacked. The agent-to-agent disclosure vacuum — Article 50 only requires AI to disclose itself to humans, and the AI Office consultation on the implementing guidelines closes on 3 June 2026. SCA breakdown when the counterparty is software. Mandate granularity under Art. 22 with no implementation standard for agent commerce. Plus the transversals matrix — DSA, DMA, GDPR, PSD3, MiCA, eIDAS 2.0 each covering only a slice, with no single regulator owning the stack: DG CNECT, DG FISMA, EDPB, and the AI Office all hold pieces.If you're shipping agent features into the European market, advising on EU digital policy, or trying to read the AI Act in the context of everything else around it, this is the operating manual.