CINDR.LA · Consulting Alliance
STRATEGIC BRIEF · 2026 PoPEye · KYARA · REGULATED AGENTIC COMMERCE
Prepared for strategic dialogue with Accenture Song

PoPEye / KYARA — the regulated transaction boundary for agentic commerce.

Accenture Song and DaVinci Commerce are building the brand and experience layer for agentic commerce. PoPEye / KYARA sits downstream at the regulated transaction boundary — where consent, disclosure, affordability, identity evidence, and audit-grade receipts become mandatory. This is not a parallel build. It is the complement the architecture needs when the agent-mediated purchase enters a regulated category.

CCD2 is the first deadline. PoPEye is the product that answers it. KYARA is the receipt authority it grows into. KYA-OS is the protocol layer that keeps it interoperable.

The Strategic Frame
DaVinci helps the brand become agent-ready. PoPEye / KYARA helps the transaction become regulator-ready.
Two complementary layers. Same agentic commerce stack. Different regulatory obligations. Neither layer replaces the other — each operates where the other does not.
01 · Accenture Song's Position

Brand and experience activation for agentic commerce.

The brand and AI-commerce layer is being built. The regulated transaction layer is the adjacent open question.

Accenture Song has staked a clear position in agentic commerce. The March 2026 investment in DaVinci Commerce — through Accenture Ventures — establishes the Agentic Commerce Experience Platform (CEP) as the brand-side architecture for AI-mediated shopping: making brands visible, consistent, and transactable inside agent-led environments across major LLM ecosystems.

The DaVinci Agentic BrandStore transforms brand assets into immersive, AI-native shopping experiences, with the Commerce Agent providing seamless handoff to retailer checkout and emerging agentic commerce protocols. Accenture Song is the named go-to-market channel, operating at the brand, experience, and AI-commerce activation layer.

The April 22, 2026 expansion of the Accenture × Google Cloud partnership — establishing the Gemini Enterprise Acceleration Program — reinforces the direction: "specialized AI agents at scale," combining Google DeepMind models with Accenture's forward-deployed engineering. Agentic enterprise transformation is the multi-year client motion.

The open question — the one DaVinci's platform does not address — is what happens when the agent-mediated purchase enters a regulated category: credit, insurance, financial products, or age-restricted commerce.

Accenture Song · DaVinci Commerce

Agentic Commerce Experience Platform (CEP)

Brand visibility in LLM ecosystems · Agentic BrandStore storefronts · Commerce Agent checkout handoff · brand-layer governance (brand voice, claim validation, age gating). Powered by the Gemini Enterprise Acceleration Program at the enterprise scale.

Outside this layer

Regulated transaction evidence

CCD2 per-transaction creditworthiness · SECCI pre-contractual disclosure · specific and unbundled consent · affordability assessment · decision provenance · audit-grade signed receipt.

02 · The Regulated Transaction Boundary

Where the experience layer hands off to mandatory compliance.

BNPL · consumer credit · insurance distribution · age-restricted commerce. Brand-layer governance is not the same as regulated-transaction compliance.
The Frame Line

DaVinci helps the brand become agent-ready. PoPEye / KYARA helps the transaction become regulator-ready.

DaVinci's Agentic Commerce Experience Platform makes brands visible, consistent, and transactable inside agent-led shopping environments. PoPEye / KYARA does not replace that layer. It begins where the experience layer hands off to a regulated transaction: credit, insurance, financial products, age-restricted commerce, or any flow where consent, disclosure, identity evidence, and auditability become mandatory.

The opportunity for Accenture Song is to extend its agentic commerce client motion into regulated categories without turning brand-experience infrastructure into compliance infrastructure. PoPEye / KYARA is the specialist module for that boundary.

As agent-mediated purchasing enters categories covered by CCD2, PSD3/PSR, IDD (insurance distribution), and MiFID II, the question regulators will ask is not whether the agent made a good choice — it is whether the consumer received the required disclosure, gave specific consent, presented sufficient identity evidence, and passed the required assessment. That answer cannot come from the experience layer alone.

Regulated categories in scope

BNPL Consumer credit Insurance distribution Age-restricted commerce PSD3 / PSR FIDA IDD MiFID II suitability

CCD2 application date

20 November 2026. Per-transaction evidence is mandatory. No behavioural-scoring exemption. No grace period.

The evidence gap

No integrated product delivers consent + bureau + identity + audit-grade receipt at checkout latency through agent-aware rails.

03 · PoPEye

The CCD2-ready evidence engine at the moment of checkout.

Transaction-moment compliance in under three seconds. Designed for the moment the DaVinci Commerce Agent hands off to a regulated purchase.

PoPEye — the Point-Of-Purchase Evidence-Yielding Engine — is the transaction-moment layer that delivers mandatory compliance evidence at the point of purchase. With 20 November 2026 as the CCD2 application date, every BNPL and consumer-credit transaction that passes through an AI-mediated commerce flow will require fresh creditworthiness evidence, standardised pre-contractual disclosure, specific consent, and an auditable signed receipt.

PoPEye delivers all of this in under three seconds at checkout latency, through existing rails, without rearchitecting the experience layer above it. The DaVinci / CEP layer hands off to checkout; PoPEye handles what the regulated transaction requires downstream of that handoff.

Identity

Consumer identity evidence

Verified identity anchored to qualified trust infrastructure at the moment of purchase.

CCD2

SECCI pre-contractual disclosure

Standardised European Consumer Credit Information, delivered and confirmed at the moment of consent — not buried in terms.

CCD2

Specific and unbundled consent

Discrete consent per product, per transaction. Not bundled checkbox flows that fail the CCD2 specificity standard.

Art. 18

Creditworthiness / affordability evidence

Bureau-fresh evidence orchestrated per-country regime. CreditSafe, Schufa, CRIF, KSV1870, Experian routes — one call, per-jurisdiction routing.

Receipt

Decision provenance + signed receipt

Audit-grade proof: who acted, what was disclosed, what consent was given, what evidence was accepted. The foundation for the KYARA receipt model.

04 · KYARA

The receipt authority layer for regulated agentic commerce.

Where PoPEye answers CCD2, KYARA answers the broader agentic-commerce compliance question across every regulated category.

PoPEye creates the consumer-side evidence at checkout. KYARA turns that evidence into a portable, agent-aware, regulator-verifiable receipt layer.

KYARA — Know Your Agent Receipt Authority — is the receipt authority layer that PoPEye grows into. Where PoPEye is the transaction-moment evidence engine, KYARA is the reusable regulated-commerce proof layer: portable, machine-readable, regulator-verifiable receipts that scale beyond any single regulation.

The architecture KYARA establishes for CCD2 — consent proof, identity evidence, affordability result, decision provenance — is directly reusable for PSD3/PSR payment mandates, FIDA consented financial-data access, IDD insurance distribution, and MiFID II suitability requirements. Build once for CCD2; the same receipt model extends across the regulated agentic-commerce surface.

For agentic commerce at scale, KYARA answers the question regulators and enterprise clients will face: when an agent made the purchase, where is the proof that the consumer was properly informed, properly consented, and properly assessed?

Portable

Receipts are not locked to a single platform or acquirer. They travel with the transaction, reusable across regulatory regimes and jurisdictions.

Machine-readable

Structured for agent-to-regulator and agent-to-agent verification — built for the agentic stack, not retrofitted from human-audit artifacts.

Regulator-verifiable

Anchored to qualified trust infrastructure. Meets eIDAS 2 assurance requirements where applicable. Defensible in regulatory examination.

Regulation runway

CCD2 PSD3/PSR FIDA IDD MiFID II
05 · KYA-OS

Open agent-identity protocol. Not a proprietary island.

Stewarded by DIF. Directionally aligned with the MCP Enterprise Readiness track. Interoperability by design.

KYA-OS is the open agent-identity, delegation, and mandate verification protocol that keeps the PoPEye / KYARA architecture interoperable across the emerging agentic-payments infrastructure. It is stewarded by the Decentralized Identity Foundation (DIF), ensuring the standard evolves openly rather than as a proprietary dependency.

The Model Context Protocol's 2026 Enterprise Readiness roadmap — published March 2026 — covers audit trails, SSO-integrated auth, and gateway behavior. KYA-OS is directionally aligned with this trajectory: enterprise agent infrastructure is converging on auditability and governance primitives. PoPEye / KYARA is built on that foundation, not against it.

The practical implication for an Accenture Song agentic commerce client motion: the regulated transaction module does not introduce a new closed silo. KYA-OS connects KYARA receipts to the interoperability layer that Mastercard Agent Pay, Google AP2, Visa Trusted Agent Protocol, and successor agent-payments protocols are building toward — the same infrastructure direction Accenture's Google Cloud partnership is oriented around.

KYA-OS

What KYA-OS provides

Agent-identity verification · Delegation chain proof · Mandate scope validation · Interoperability across agentic payment rails

MCP Enterprise Readiness · 2026

Audit trails · SSO-integrated auth · gateway behavior. The MCP roadmap is adding the governance primitives that regulated-trust infrastructure requires — KYA-OS is aligned with, not competing with, that direction.

06 · Additive to Accenture Song

A specialist regulated-transaction module — not a replacement layer.

The four-layer model for regulated agentic commerce. Extends Song's client motion into regulated categories.

PoPEye creates the consumer-side evidence at checkout. KYARA turns that evidence into a portable, agent-aware, regulator-verifiable receipt layer.

CCD2

The first regulated forcing function

Mandatory per-transaction creditworthiness evidence, specific consent, and audit-grade receipts by 20 November 2026. The deadline that creates immediate enterprise demand across financial services, regulated retail, and insurance distribution.

PoPEye

Transaction-moment evidence engine

Consent, disclosure, affordability evidence, and signed receipt at checkout latency. The CCD2 answer — and the first deployment of the KYARA receipt model. Operates downstream of the DaVinci / CEP checkout handoff without modifying the experience layer.

KYARA

Receipt authority for agentic commerce

Portable, machine-readable, regulator-verifiable proof that scales beyond any single regulation. The decade-long position: regulated infrastructure for agentic commerce that no brand-experience or payment-rail layer ships.

KYA-OS

Open agent-identity protocol

Keeps the architecture interoperable across the emerging agentic-payments infrastructure. DIF-stewarded. Not a closed proprietary island. Aligned with the MCP Enterprise Readiness trajectory.

CINDR.LA — AI automation venture builder. IDCanopy — regulated identity and compliance infrastructure company. The two entities co-deliver the PoPEye / KYARA engagement at the regulated transaction boundary.

CINDR.LA designs and packages the PoPEye / KYARA engagement. IDCanopy supplies the identity, bureau, KYA, and receipt-infrastructure depth. The module sits downstream at the regulated transaction boundary — where consent, disclosure, affordability, identity evidence, and audit-grade receipts become mandatory — and operates as a complement to brand, experience, and AI-commerce activation layers already in delivery.

The co-sell opportunity maps to Song's enterprise client base in financial services, regulated retail, and insurance: clients already running or planning agentic commerce initiatives who will face regulated transaction requirements as agent-mediated purchasing extends into BNPL, consumer credit, and compliance-heavy categories. PoPEye / KYARA is the specialist module that makes the Song client motion enterprise-safe in those categories without turning the brand-experience infrastructure into compliance infrastructure.

07 · Suggested Collaboration Shape

Three modes for bringing the regulated transaction module into the Song client motion.

From initial fit validation through reference architecture to joint go-to-market on regulated agentic commerce.

CINDR.LA designs and packages the PoPEye / KYARA engagement. IDCanopy supplies the identity, bureau, KYA, and receipt-infrastructure depth. In each collaboration mode, CINDR.LA leads the engagement design; IDCanopy provides the regulated infrastructure underneath.

Mode I

Joint client workshop

Map product categories, consent flows, evidence sources, and receipt requirements for a specific Accenture Song client engagement. Establish precisely where the regulated transaction boundary falls in the client's agentic commerce roadmap.

  • Product category mapping against regulated evidence requirements
  • Consent flow and disclosure architecture review
  • Evidence source identification per market and regulatory regime
  • Receipt schema requirements for the client's regulatory exposure
Mode II

Reference architecture + co-delivery

PoPEye / KYARA as a regulated-commerce module within Song's agentic commerce transformation work — delivered alongside the DaVinci / CEP layer as the downstream evidence architecture for regulated transaction categories.

  • Regulated-evidence module integrated into the client delivery architecture
  • PoPEye instance for one product mode and one launch market
  • Receipt schema and governance model for the client's compliance regime
  • Reusable reference architecture for subsequent regulated categories
Mode III

Distribution + co-sell agreement

Joint go-to-market on regulated agentic commerce across Song's financial services, regulated retail, and insurance client base. PoPEye / KYARA positioned as the named regulated-commerce module within Accenture Song's agentic commerce offering.

  • Co-sell into regulated categories across Song's enterprise client base
  • PoPEye / KYARA as the downstream regulated-commerce module in client proposals
  • Market-specific configurations for each jurisdiction and regulation
  • Expansion path as regulated agentic commerce surfaces multiply
08 · Expansion Runway

CCD2 is the first wedge. The regulated agentic-commerce surface is larger.

CCD2 is the first wedge; PSD3/PSR, FIDA, and adjacent regulated transaction surfaces extend the same architecture.

The regulated-transaction boundary is not a single-regulation problem. As agentic commerce scales across Europe and as regulated financial products, insurance, and financial-data-access flows enter agent-mediated channels, the receipt architecture KYARA establishes becomes the durable infrastructure layer: the same evidence model, the same consent architecture, the same audit-grade receipts — applied to each regulated surface as it comes into scope. Funding the architecture for CCD2 is not buying a single-use compliance widget. It is taking the durable position in regulated agentic commerce before the receipt layer becomes a commodity.

CINDR.LA · IDCanopy

Continue the regulated agentic commerce conversation.

For further detail on the PoPEye / KYARA architecture, the four-layer model, or the collaboration shape that fits the current Accenture Song engagement — reach CINDR.LA directly.