A fresh proposal circulated on the Ethereum Magicians forum this week aims to tackle one of the fastest-growing pain points in onchain automation: how to keep delegated spending, especially by AI agents, from going off the rails. The idea, still an early discussion draft and nowhere near a finalized ERC, introduces an asset‑enforced spend mandate that moves safety controls into the token contract itself rather than relying solely on wallets or applications.
The design is deliberately narrow. Instead of a blanket approve-and-forget model, an asset could consult an onchain gate before allowing a transfer, enforcing rules such as per‑transaction caps, expiration dates, allowed tokens, and revocation status. Crucially, the mandate travels with the token. If an AI agent’s signing key is compromised or a session misbehaves, the token can still reject transfers that exceed what the holder originally authorized. The proposal also introduces a machine‑readable reason vocabulary, so a failed transfer could explain exactly why it was blocked—no mandate, expired mandate, revoked permission, or amount over cap—rather than just reverting silently.
The timing is no coincidence. Over the past six months, the infrastructure for agent‑controlled wallets has moved from experimental to operational at scale. MetaMask opened early access to its Agent Wallet on June 8, letting users delegate swaps, perpetual futures, prediction markets, and liquidity provision across nine EVM chains and Hyperliquid while keeping their own keys. The product bakes in daily spend limits, allowlisted protocols, mandatory 2FA for any transaction outside the rules, and a $10,000 coverage guarantee for transactions deemed safe. Coinbase launched Agentic Wallets in February, built on the x402 machine‑to‑machine payments protocol with keys isolated in hardware‑enclaved Trusted Execution Environments. As of June 2026, x402 has crossed 480,000 active agents, processed over 165 million transactions worth more than $50 million, and seen weekly transactions surge roughly 265% since March to 2 million per week.
The user base, however, remains deeply divided on whether to hand over the keys. A Cryptopolitan poll of crypto‑native readers—who already self‑custody and run DeFi strategies—found 30.22% flatly refuse to let an agent touch their wallet. Another 25.9% would say yes, but only from a trusted company, while 23.7% are ready now and 20.1% are willing if guardrails are in place. Combined, nearly 70% of the audience is open to agent‑controlled wallets in some form, provided the trust model is right. The same poll revealed that “Nope” and unconditional “Yes” are essentially tied, underscoring that the community has not settled on an answer.
The Ethereum proposal, if adopted, could become a critical piece of that trust model—moving spend limits from the agent’s good behavior to the asset’s code. It does not try to solve identity, compliance, or every permissioning problem. Instead it offers a safety primitive purpose‑built for an “agentic economy” that Coinbase CEO Brian Armstrong believes could grow larger than the human economy. For now, the draft is open for feedback, but the direction is clear: as bots rebalance, pay invoices, and interact with DeFi, the tokens they move may soon carry their own built‑in rules.
