Polestar Solutions

Field Notes

Agent to agent: how the Agent Negotiation Protocol works

When a buyer's AI agent negotiates with a vendor's AI agent, someone has to keep the record straight. How the open Agent Negotiation Protocol handles identity, mandate, and a ledger neither side can rewrite.

Four things every automated offer needs

A human negotiation carries a lot of trust implicitly. You know who is in the room, you know they can approve the number they just said, and if they deny it tomorrow, there are witnesses. Strip the humans out and all of that has to be made explicit, or the negotiation is worthless as evidence.

The protocol builds each exchange from four parts. First, a signed identity, so every message is cryptographically tied to the party that sent it and cannot be forged or repudiated. Second, a declared mandate, the authority the agent is operating under: the ceiling it may accept, the terms it may concede, the point past which it must stop and fetch a human. Third, a structured offer in machine readable form, price, term, metric, and conditions as data rather than prose, so there is nothing to misread. Fourth, a place for all of it to land that cannot be edited after the fact.

app.isvcosell.com/agent-protocol

Every agent arrives with a signed identity and a declared mandate before a single offer is exchanged.

THE SAME JOB, TWICE

TODAY, BY HAND

The vendor's automated deal desk quotes and counters at machine speed while your side answers with a spreadsheet and a slow email chain.

Offers live in half-remembered phone calls and buried threads, so the analyst reconstructs who said what from forwarded emails when the terms are drafted.

When the vendor claims your side agreed to something, there is no record proving what authority anyone actually had.

The dispute over that is not what we agreed burns days of legal and procurement time at the end of every negotiation.

Days of reconstruction per deal, and a record neither side can prove

WITH ISVCOSELL

Open the agent protocol page, read the open MIT-licensed standard, and run the first signed round.

Set your agent's declared mandate, the ceiling it may accept and the point where it must stop and fetch a human, and the boundary becomes part of the record.

Let the agent-to-agent rounds run in the sandbox, trading structured offers as data rather than prose, each message cryptographically signed to its sender.

Read the hash-chained session ledger, take the recommended landing zone, and make the human call from a complete tamper-evident transcript.

The opening rounds run at machine speed; the human reads a transcript, not a memory

What changes: the days spent reconstructing who offered what shrink to reading a ledger that cannot be quietly rewritten, because altering any entry breaks every hash after it. The opening exchange that took weeks of email rounds happens in seconds in the sandbox, and the person who signs starts from proof instead of recollection.

The mandate is the part that matters most to the person who signs. Your agent never gets a blank cheque. It negotiates strictly inside the envelope you set, and the boundary is part of the record, so the vendor's agent cannot claim your side agreed to something it had no authority to agree to. The judgment call that commits the company stays where it belongs, with a person.

PART TWO

The ledger neither side can rewrite

The centrepiece is the session ledger. Every message, offer, counter, acceptance, and walk away, is written into a hash chained record where each entry seals the one before it. Change any earlier line and every later hash breaks, so tampering is not just against the rules, it is visible on inspection.

This is the quiet revolution. Negotiations have always been a swamp of "that is not what we agreed" and half remembered phone calls. A hash chained ledger turns the whole exchange into a single source of truth that both parties hold and neither can quietly edit. When the contract is drafted, the terms trace straight back to the offers that produced them.

"A handshake you cannot photograph is worth less than an offer you can prove. The ledger is the photograph."

None of this runs unsupervised on your live deals. Agent to agent rounds happen in a sandbox, a contained space where your agent can explore the vendor's position, test where the floor really is, and surface a recommended landing zone, all before a human decides whether to take it forward. The machines do the fast, repetitive opening exchanges. The person reads the transcript and makes the call.

app.isvcosell.com/workflows

The agent round runs in a sandbox and routes a recommended landing zone to a person. Draft by machine, decision by human.

PART THREE

The weekly licensing brief

Want to be updated when major licensing and pricing changes land? One analyst brief a week: the price rises, metric changes and audit campaigns that move software costs. Work email only.

Get the brief

Why an open protocol, and not ours alone

A negotiation standard that only one vendor can read is not a standard, it is a moat. The protocol is deliberately open and MIT licensed so that any buyer agent and any seller agent can speak it, whether or not either was built here. A closed protocol would let whoever controls it also control the terms, which is precisely the asymmetry buyers are trying to escape.

Openness is also what makes the ledger credible. If the format is public, a court, an auditor, or the counterparty's own tooling can verify the chain independently. Evidence that only one side can read is not evidence. The protocol is a public good on purpose, because trust between adversaries only works when the referee is neutral.

There is a longer game here too. Standards win by adoption, not by fiat, and a buyer side protocol only disciplines vendor agents once enough of the market speaks it. Keeping it open is how that happens: no license to negotiate, no gatekeeper to pay, nothing stopping a vendor from adopting it except the fact that it makes their agent accountable. The asymmetry buyers have lived with for a decade does not close because one platform got clever. It closes when the rails everyone negotiates on are ones nobody privately owns.

IN PRACTICE

What the protocol guarantees

1 No forged offers. Every message is signed to its sender, so neither side can invent a concession the other never made, or deny one it did.

2 No authority you did not grant. Your agent negotiates inside a declared mandate. Past the boundary it stops and asks a human, and the boundary is on the record.

3 No quiet rewrites. The hash chained ledger seals the order of events. Altering an earlier entry breaks every later one, so tampering shows.

4 No lock in. The protocol is open and MIT licensed, so it works across agents from different builders and can be verified by anyone.

THE HONEST LIMIT

Machines negotiate, people commit

The protocol does not hand your renewal to a robot. It automates the part that was always mechanical, the opening exchange of numbers, and makes it provable. The relationship, the trade offs, and the signature stay human. What changes is that the human now starts from a complete, tamper evident transcript instead of a vague memory of a call.

That is the whole design goal. The first round gets faster and better documented, the record becomes something you can actually rely on, and the decision that binds the company remains a person's to make. You can read the standard, and run the first signed round, from the agent protocol page.

app.isvcosell.com/cases/example

A case, end to end: the strategy, the opening email, every vendor reply with the agent's read of it, and the offer that stopped the run for a person.

FF

About the author

Fredrik Filipsson, Cofounder, ISVCOSELL

Fredrik has spent more than twenty years in enterprise software, with time at Oracle, IBM, SAP, and Salesforce before moving to the buy side. He structured and priced the kind of large agreements most buyers only see once or twice in a career, which taught him where the leverage sits and how far a vendor will actually move. He started ISVCOSELL to hand that knowledge to every sourcing team.

More posts by Fredrik Connect on LinkedIn →

See it in the product

How benchmarking works → Browse the use cases → Every feature → Calculate your time saved →

FREE TRIAL · FULL PLATFORM · NO CARD REQUIRED

Put a signed, ledgered agent on your next renewal.

The free trial opens the benchmarking database, 1,483 vendors deep, plus the negotiation guides, playbooks, and talking points for your own renewals. No card needed, a corporate email is all it takes.

Start your free trial → Or decode a contract free, no account

Free for 30 days, no card needed. Your data stays isolated at the database, and you can export or delete it any time.

Watch it in action

The ISVCOSELL Deal-Room Hand ISVCOSELL the negotiation The email that writes itself

Browse the full demo library →

THE ISVCOSELL AI BRIEF · WEEKLY

The week in enterprise software buying, in one email.

What shipped on the platform, and the pricing and licensing moves worth knowing before your next renewal. One email a week, to your work address. Unsubscribe any time.

Subscribe

More in Field Notes

1,483 vendors, one method: how the benchmark library is built

A benchmark is only as good as the deals behind it and the honesty of how it is compared. How the library is built from modelled deal cohorts, normalized, placed in the right peer cohort, and graded by confidence.

Read

300 vendors, 52 weeks, one team: the renewal calendar problem

The average enterprise runs 300+ software vendors and every one of them renews. Why notice windows are where budgets quietly die, and how a renewal desk with AI agents turns the calendar from a threat into leverage.

Read

A calmer desk, and Main Apps where the work starts

The platform now wears the desktop look: warm paper, one interactive colour, and Main Apps folded into Home so your instruments live where you start.

Read

A live analyst in your ear: inside the call copilot

The vendor call is where prepared positions meet improvisation, and the rep does this every day. The live call copilot runs a whisper rail beside the conversation: live transcript, grounded prompts, and the exact fact you need at the moment the claim is made.

Read

Adobe ETLA vs VIP: seat reclaim, right-profiling, and the walk away

An Adobe ETLA renewal is decided before you discuss price, by how many seats sit idle and how many are over-profiled. How to reclaim the waste, right-profile the rest, and build the VIP walk away Adobe respects.

Read

Agentforce commits: answer eight questions, then let the model do the math.

The Agentforce optimizer interviews you in eight questions, builds a consumption forecast, and prices minimum, medium, and growth commitments against it, with Digital Wallet anchoring and one tap what if scenarios.

Read

Want help putting this into practice?

Contact us to discuss your project.

Get in Touch