ERC-8196 standard finalizes for AI agent wallets with owner-defined cryptographic spending and action limits.
AI & Agents ·
ERC-8196 has been finalized as a Standards Track Ethereum Improvement Proposal, with authors Leigh Cronian and Chris Johnson alongside contributions from Cybercentry and the Virtuals Protocol. The standard establishes a framework for AI agent wallets that operate under cryptographically enforced policies rather than relying solely on trust or application-level restrictions. The specification is available at https://eips.ethereum.org/EIPS/eip-8196.
The core innovation addresses a fundamental mismatch between agent autonomy and security. Unlike traditional wallets where humans review each transaction before signing, autonomous agents execute thousands of transactions continuously without direct supervision. This autonomy creates exposure: agents could be compromised, application logic could be bypassed, or hosting infrastructure could fail—scenarios in which unrestricted private key access becomes dangerous. ERC-8196 inverts the model by having wallet-level policy enforcement rather than trust-based permissions.
Under the standard, an owner defines and delegates specific authorities to an agent, with the wallet verifying each action against those policies at execution time. Policies can specify permitted actions, allowed or blocked contracts, spending caps, delegation duration, and maximum ERC-8126 risk scores. What remains unaddressed in the material is adoption timeline, compatibility with existing wallet implementations, or whether the framework has been tested against specific attack vectors beyond the architectural protection it provides.