ARP Rules, Rule Sets, and Files
ARP controls are reusable merchant resources that can support one or more store flows.
Rules
Rules express a single traffic behavior such as a security decision, rate limit, or transformation.
Rule Sets
Rule sets group compatible rules so endpoints can apply a reviewed policy consistently. Test ordering and conflict behavior before production use.
Files
ARP files store configuration used by agentic commerce integrations. Treat them as controlled configuration: review changes, avoid embedded secrets, and retain a last known-good version.
Change Checklist
- Confirm ownership and affected stores.
- Test allow and deny examples.
- Validate rule ordering.
- Check that no secret is stored in a file.
- Record rollback steps.