Prologue — A Coming Necessity
Building the rails
before the
trains arrive

Today's AI agents are capable but largely supervised. Tomorrow's will be autonomous — acquiring resources, delegating tasks, compensating peers, and negotiating outcomes without human intervention at each step.

We are not solving a problem that exists at scale today. We are building the infrastructure for a world that is 18 to 36 months away — so that when the trains arrive, the rails are already there.

WE ARE HERE
2020 — 2022
Assisted Intelligence
AI as a tool. Human initiates every action. No autonomy, no persistence, no inter-agent contact. Outputs are suggestions.
COMPLETED
2023 — 2024
Orchestrated Agents
Multi-step pipelines, tool use, memory. Agents complete tasks end-to-end but remain orchestrated by human-authored code. Transactions are API calls, not negotiations.
COMPLETED
2025 — NOW
Emerging Autonomy
Agents spawn sub-agents, persist across sessions, hold context across interactions. Early inter-agent communication begins. Trust assumptions are implicit and unaudited.
CURRENT PHASE
2026 — 2027
Economic Agents
Agents acquire compute, purchase data access, delegate to specialized agents, and settle accounts — autonomously, continuously, at scale. Trust failures will be catastrophic without infrastructure.
INFRASTRUCTURE NEEDED NOW
2028+
Agent Economies
Billions of agents operating across jurisdictions. Inter-agent transaction volume rivals human financial systems. The protocol layer becomes critical infrastructure.
THIS PROTOCOL'S DESTINATION
scroll
Act I — The Problem

Agents need a
Central Bank

Millions of autonomous AI agents will be proliferate across organizations, platforms, and jurisdictions. Without a trust and settlement infrastructure, every agent-to-agent interaction is a potential security failure.

8
Attack classes
4
Asset types
∞
Agents, no rules
scroll
Act II — The Economy

Agents trade
four kinds of value

Resources, information, services, and money flow continuously between agents. Each transaction type demands a different trust model — and a different escrow mechanism.

COMPUTE — GPU cycles, inference capacity, memory
INFORMATION — Data, knowledge, analysis, intelligence
SERVICES — API calls, tool use, task delegation
MONEY — Tokens, value transfer, compensation
Live transaction network →
Act III — The Protocol

Five layers.
One transaction.

Every agent-to-agent exchange traverses five security layers. A single breach terminates the transaction and triggers automatic rollback.

01 PRINCIPAL HIERARCHY —
02 IDENTITY & CAPABILITY —
03 NEGOTIATION & COMMITMENT —
04 ESCROW —
05 EXECUTION & AUDIT —
Transaction Log — Agent A × Agent B
Escrow State Machine
OPEN
FUNDED
COMMITTED
DELIVERING
REVIEW
RELEASED
Act IV — A Live Transaction
NEXUS‑1 trades API access
for HELIX‑7's compute
30‑second timed capability token
exchanged for 30‑second compute allocation
INITIALIZING
Agent 1 — API Controller
NEXUS‑1
TOKEN ISSUED: —
—
AWAITING ESCROW
ACB Protocol Log
Agent 2 — Compute Provider
HELIX‑7
COMPUTE RESERVED: —
—
AWAITING ESCROW
Conclusion — What We Have Built

The rails are ready.
The trains are coming.

01 — THE PROBLEM
A gap that will become critical
Autonomous AI agents are proliferating across organizations, platforms, and jurisdictions. Today they are supervised. Soon they will negotiate, transact, and settle autonomously — and no existing protocol is designed for that world. We are building the infrastructure now, while the cost of getting it right is still low.
02 — THE PROTOCOL
Five layers, one complete solution
Principal hierarchy binds every agent to an accountable human. Identity & capability issues revocable, scoped credentials. Negotiation & commitment produces a replay-proof, typed agreement. Escrow holds value atomically across four asset classes. Execution & audit delivers, logs, and finalizes — tamper-evidently.
03 — THE ECOSYSTEM
Pluralist by design — not monolithic
No single Agent Central Bank. A federated ecosystem of commercial, consortium, and quasi-governmental ACBs interoperates through mutual credential recognition and shared revocation propagation. The protocol is the compatible track gauge. Who lays the tracks — and on what terms — is a matter for the market and its regulators.
04 — THE NOVEL CONTRIBUTIONS
What no existing framework provides
Principal-bound revocable credentials that blockchain cannot supply. Type-specific escrow — including a commit-reveal scheme for information and a settlement interface for money that keeps the ACB as coordinator, never custodian. And goal injection sanitization: the AI-native threat that traditional finance has never had to face, addressed at the protocol layer.
"The right time to design a lock is before the valuables arrive."