Darma Request the audit

AI agents already shop your store. Which orders were theirs? When an agent’s order is disputed, what’s your evidence? Let good AI shoppers through. Catch the bad ones.

See every order, return and cancellation an agent makes, and who authorized it. Darma records who authorized every agent action, so you can answer disputes written for humans. Agent-aware controls for orders, returns and subscriptions on Shopify Plus.

Get your free Agent Exposure Audit See a sample report

Read-only to start. Nothing changes at checkout.

subscription.cancelled

recharge:subscription:88213 Synthetic example

  1. Actor 14:19:03

    AI assistant, self-declared T2

    Checking Attributed

  2. Action 14:19:03

    Cancellation recorded, before and after state kept

    Recording Recorded

  3. Decision 14:19:04

    Confirm with the account holder

    Deciding Confirm

  4. Authorization 14:22:41

    Confirmation sent to the account holder Confirmed by the account holder

    Awaiting Confirmed

  5. Outcome 14:22:44

    Cancellation stands

    Open Linked

Record sealed and chained

sha256 9f3a61c0…e27bc21e

Complete
Checkout
Untouched. Darma reads events after they happen.
Failure
Fails open. The action goes through and is recorded.
Enforcement
Off for at least 14 days, then your call.
Proof
Chained and sealed daily, checkable without trusting us.

Agent traffic breaks three things you rely on.

AI assistants now place orders, request returns and cancel subscriptions for real customers. Your store sees what happened, not who did it.

  1. You can’t tell agents from bots.

    An assistant buying for a real customer looks like automation. So does a scraper testing stolen cards. Block both and you lose good orders; allow both and you invite abuse.

  2. Disputes assume a human clicked buy.

    When a customer disputes an order their assistant placed, the evidence issuers expect (the cardholder’s own session and click) isn’t there. You need proof of who authorized it.

  3. Refunds and cancels now happen at machine speed.

    Agents can request returns, skip or cancel subscriptions and change addresses in seconds, across many accounts, before anyone on your team looks.

Figure What it measures Source
261M → 324M

Card disputes worldwide, 2025 to 2028

+24% in three years

 Mastercard / Datos Insights, 2025 Global Chargebacks Outlook
$128

What each dispute costs a merchant

$46 in fees plus $82 in labor

 chargeback.io, August 2026
1.5%

Visa’s excessive-dispute threshold

Count-based, since April 2026

 Chargeflow, 2026

From install to proof, in four steps.

Darma runs beside your store, never inside checkout. It watches the five account actions agents take and records each one.

  1. Install

    Read-only to start: no checkout changes, no theme edits beyond a pixel, nothing in the path of a sale.

    • Read orders
    • Read subscriptions
    • Checkout untouched

  2. See

    Orders, returns, subscription changes, and address and account edits, each labeled by who acted.

    • T0A person
    • T1–T2A declared agent
    • T3Probable automation
    • T4Your own tools

  3. Decide

    Allow, confirm with the customer, or deny. Confirmations come from your own email address and go to your customer, never to the agent.

    Allow Confirm Deny

  4. Prove

    Each record is chained to the last and sealed daily. A dispute packet carries the proof.

Recommendations first. For at least 14 days, Darma only records and recommends. Then you turn on enforcement, one action type at a time.

A week of agent actions, in plain view.

The core of the Agent Exposure Audit: every agent action, and whether its actor, authorization, action and outcome are established from facts.

Agent activity Last 7 days Synthetic store

Agent Accountability Coverage 3 of 6 · 50%

Action Actor Authorization Outcome Record
Order placed order.placed · #40117 T1 Declared agent, via a sales channel Channel consent Delivered Complete
Subscription cancelled subscription.cancelled · #88213 T2 AI assistant, self-declared Customer confirmed Cancellation stands Complete
Shipping address changed address.changed · #40152 T2 AI assistant, self-declared Awaiting the customer Held until confirmed Open
Return requested return.requested · #40098 T2 AI assistant, self-declared Customer confirmed Refunded Complete
Order placed order.placed · #40161 T3 Probable automation, undeclared No evidence Refunded Incomplete
Subscription skipped subscription.skipped · #88240 T1 Declared agent, via a sales channel Channel consent Next shipment pending Open

Every action’s before and after state is kept. Coverage counts facts only; anything Darma infers is labeled and kept apart.

Get the full sample report

It’s being built from our lab data. Leave your email and we’ll send it the day it’s ready.

No black box. Every claim can be checked.

Darma’s records are built to hold up in front of an issuer, an acquirer or your own finance team, and to say plainly what they do not prove.

Facts and inferences, kept apart

What was observed is evidence. What Darma computes is labeled with its method and version, and never counted as a fact.

Confirm the human, never the agent

Authorization comes from the account holder, through your store’s own verified email. Agents are never sent codes or challenges.

Sealed daily, checkable by anyone

Records are chained and anchored daily with a signature and an independent timestamp, so anyone can verify a dispute packet without trusting our database.

Design partners get the audit free.

We’re looking for a few Shopify Plus merchants running Recharge subscriptions. No checkout changes, and it runs alongside your fraud and dispute tools.

You get

  • A free Agent Exposure Audit of your last 90 days
  • Founder-level support, directly
  • Pilot pricing, locked in

We ask

  • A 30-minute call
  • 90 days of read-only data
  • Feedback every two weeks
  • The outcome of any dispute where you submit a Darma packet

Pilot pricing, flat monthly

Pilots start after the audit. Design partners keep the pilot price.

Questions merchants ask first.

Does it slow down checkout?

No. Darma is never in checkout. It reads events after they happen and acts afterward, with holds and reversals.

Does it replace my fraud tool?

No, it feeds it. Darma’s verdicts appear as order risk notes and tags your team and tools already read.

What data do you access?

The minimum: order, return, subscription and customer events for the five actions Darma covers, plus a customer’s email, used only to send a confirmation. Personal details are encrypted and stored apart from the records.

Will it block my customers?

No. It only recommends until you turn enforcement on, one action type at a time, after at least 14 days.

Couldn’t an agent click the confirmation link itself?

If it controls the customer’s inbox, yes. A confirmation is strong evidence of authorization, not proof a person clicked, and every Darma packet says so.

Request your free Agent Exposure Audit.

Eight quick questions. If it’s a fit, you’ll book a 30-minute call right after.

  1. 1

    Answer eight questions

    We read every request ourselves.

  2. 2

    Talk for 30 minutes

    We walk through what we need and what you’ll get back.

  3. 3

    Get your audit

    Read-only access to your last 90 days. Nothing changes at checkout.

Have you seen orders, returns or cancels you think an AI agent made?

We use this only to contact you about the audit. See the privacy notice.

See what AI agents do in your customers’ accounts. Let the good ones through. Keep the receipts.

Get your free Agent Exposure Audit
Request the audit