Deep First Search 推出 agent 支付安全层

Gagantua 🐘 @GagantuaWEB3原推发布于 2026.10.26

在 X 上打开原推

AI agents are now paying for things on their own. Chainalysis counted 138 million x402 payments on Base alone. x402 is the standard Coinbase and Base built for machine to machine payments in USDC. Your agent reads a page, signs a payment, gets the data. Fully automatic. But this opens two problems nobody has solved. Security: your agent reads untrusted content all day, and it moves money. One poisoned page can trick it into paying the wrong wallet. This already happened, over 150 thousand dollars drained from one agent through a single prompt injection. Privacy: every x402 payment is public. Payer, payee, amount, timing. Anyone watching the chain can read your balance, and your competitors can see your suppliers. Deep First Search (@DeepFirstHQ) is building the fix. Safe rails for the agent economy, live on Base in beta. http://deepfirstsearch.com Three layers, one SDK. Agent Safe is an onchain vault built on one assumption, that your agent WILL be tricked. You sign a budget per merchant, and the agent's key can only spend inside it. It can never widen the budget, and you can pause or withdraw anytime. The Policy gate treats every payment request as hostile. Payee, asset, network and price must match exactly what you approved before anything is signed. The model proposes, code decides. Exposure control is the privacy layer. Each merchant sees a fresh payer with no history, and what your agent bought is shared with that merchant only. You can still prove any payment to an auditor, but nobody else can link it to you. And this is shipped, not promised. Real payments settled on mainnet, a recorded Claude session that refused to pay a different wallet mid attack, four attack simulations with zero signatures sent, 260 plus tests. Works with Claude, Cursor, LangChain and Coinbase AgentKit. Non custodial, immutable contracts, open source. No token exists yet. Their words: no token until there is revenue to burn. Product first, token last. This matters now because Mastercard, Visa, Meta, Stripe and PayPal are all building agent commerce. Every one of those agents can move money, and none of them answer what happens when the agent gets tricked. It is early. Unaudited beta, one builder, a big kudos to @nicolas_tursi. But the problem is only growing, and agent payments need guardrails. This is one of the first serious attempts at building them. Follow @DeepFirstHQ http://deepfirstsearch.com https://x.com/DeepFirstHQ/status/2107263222688428298/video/1