Pieza independiente

Identity, wallet and rails

Movement 6 · The Territory — September 2026

I When it stops being automation

A program that fills in a form is not an economic actor. It is an interface in a hurry [using somebody else's credentials].

The line is crossed when the program has four things [and until then there is nothing new under the sun].

E_A = I + W + P + L

I: an identity of its own, distinguishable from its owner's
W: an account or wallet with funds in it
P: permissions covering what it may do and up to how much
L: liability attributable to a specific person

Three of the four are built. The missing one is the last.

II The rails laid in a single year

Date	What turned up
Sep 2025	a protocol letting an agent complete a purchase
Dec 2025	packaged infrastructure for multi-agent systems
Feb 2026	payments with no account and no interface key
Mar 2026	a protocol built for two machines to pay each other
Apr 2026	agent-initiated payment trials in Latin America and the Caribbean
Jun 2026	guidance on responsible use of these systems in finance

Eleven months to go from assisted checkout to machine-to-machine payment. Identity and money get built at the same time; liability comes behind, years late and with nobody assigned to it.

The order matters: first the rails go down, then the argument about who pays for the derailment.

“An agent with no one responsible for it is not autonomous. It is anonymous, which is a different thing and a cheaper one.”

III The scene you can already describe

An agent with its own identity, its own wallet and permission to enter contracts runs an operation. It goes wrong. Liability lands on a person who never saw the operation and finds out from the statement.

That is not machine autonomy. It is delegation without a record [the oldest way there is of losing money].

IV Minimum permissions [safe]

A budget with a ceiling and an expiry date, not an open balance.
A whitelist of payees; everything else asks for confirmation.
A machine-readable receipt for every operation, stored outside the agent.
A revocation switch that works without the agent's cooperation.
A named person on the record, not a department.

V Risks

Automated fraud scales exactly like automated commerce and on the same protocol; a system that lets two machines pay each other without friction lets two machines defraud each other without friction.

There is a quieter risk: decision speed outruns detection speed. When the operation takes four hundred milliseconds and human review takes two days, control stops being preventive and becomes archaeology — you study what already happened.