ai agents are about to start trading real money on-chain. the infrastructure isn't ready for that.

Post original

fair if it reads that way, i'll take the note on tone. on the actual point, you're right that good agent setups use middleware for risk management and permission scoping. nobody competent is handing raw private keys to a model. that's the custody and access control layer, and it's mostly solved for teams who know what they're doing. but that's not what the post is about. middleware controls what the agent is allowed to do. it doesn't verify what the venue actually did with the order. your agent can have perfect risk limits, scoped permissions, and session keys, and still have zero visibility into whether the matching engine filled it fairly, reordered it, or extracted value from it. custody risk and execution risk are different trust surfaces. middleware handles the first one. the second one needs the execution layer itself to be verifiable.