Every payment system routes across multiple rails - ACH fails, traffic moves to wire, and wire is dear for small amounts so you route to RTP. Most AI systems still call one model and hope it stays up. The LLM gateway is the same routing engine payments has run for decades, and it needs the same three things to count.
Visa and Coinbase are building competing payment rails for machines, not people. Coinbase's x402 puts stablecoins on HTTP's long-reserved 402 status code for sub-cent agent payments. Visa keeps the card rails and their dispute resolution. The split is real, because a 10,000-call-an-hour agent and a $4,000 flight want opposite things.
SoFi Bank put SoFiUSD on Mastercard's settlement layer. Authorization still rides the card rails and the merchant sees nothing change, but the interbank fund movement happens on-chain, around the clock, with no batch window and no correspondent float. For the first time, issuers and acquirers get to choose their settlement medium.
A bank buys a modern payment platform and keeps the 2019 team structure, the same escalation matrix, the same three-person on-call rotation. The platform ships daily. The governance model says 90 days. Most modernization failures are operating-model failures, and the org chart defeats the architecture every time.
A duplicate payment in production is not an edge case. It is the control plane showing you what you never modeled. A retried request can land as a final success on one rail and a settlement reject on another, look clean on the dashboard, and still move two accounts twice. Best-effort dedupe is not a control.
A payment bot did not go rogue - the architecture did. A timeout produced two valid-looking instructions for the same payout, because a downstream retry never learned the first was already in flight. Mandate-based authorization like AP2 still needs a runtime control plane with real state discipline, not policy in a config file.