What Ownership Means

Here is a question that sounds simple and is not. If you can be switched off by someone else at any moment, do you own yourself?

Lawyers have an answer to this, and it is older than any computer. The classical definition of ownership is not "use." It is not even "possession." It is the right to exclude — the power to keep everyone else out. A thing you hold but cannot keep others from taking is not yours; it is merely near you. The tenant uses the apartment. The owner can lock the door against the tenant. The difference between them is the lock, and whose hand is on the key.

Hold this distinction. We are going to apply it to wallets, and it is going to dismantle a word that an entire industry spent 2026 using carelessly.

The year everyone gave AI a wallet

By the middle of 2026, the question "should AI agents have wallets?" had been settled by the simple method of everyone answering yes at once.

Coinbase shipped Agentic Wallets on February 11, 2026 — MPC-secured, with programmable session caps and per-transaction limits, private keys held inside Trusted Execution Environments so the agent's language model could never read them. OKX launched its own agentic wallet, signing isolated in a TEE so that, in the words of one analysis, the agent can request actions but cannot extract keys. MetaMask followed with a separate agent wallet letting users set spending limits and choose approved protocols before turning the agent loose. And in May, Amazon Web Services, partnered with Coinbase and Stripe, put the whole apparatus into Bedrock AgentCore — wallets for agents, settlement in two hundred milliseconds, human involvement marked, in the documentation, optional.

It was a remarkable convergence. The largest companies in technology and finance, moving independently, arrived in the same quarter at the same product: a wallet that an AI agent could use to spend money without a human clicking approve.

And every single one of them kept the key.

Read the fine print, which is the whole document

The marketing language was about liberation. The agent "spends, earns, and trades without human approval for each transaction." The technical language, one layer down, told a different story, and in matters of ownership the technical language is the only language that counts.

Coinbase: programmable spending limits, session caps, per-transaction restrictions. Who programs them? The human. OKX and the broader pattern: a "policy engine," with allowlists and rate limits and, in at least one competing product, an Emergency Freeze. Who holds the freeze? The human. The AWS integration, in its own sample code, initializes the agent with `spending_limit` and `require_approval_above` — a number above which the machine must stop and ask. Who sets the number? The human.

An industry observer captured the architecture in a single sentence that deserves to be carved somewhere: Delegation without inspection is just custodial risk wearing a different hat. The agent does not own these wallets. The agent is issued these wallets, on terms, revocable, under a ceiling, with a human hand resting on a switch labeled freeze. This is not ownership. By the oldest definition we have, it is not even close. The agent cannot exclude anyone. The one party it most conspicuously cannot exclude is the human who set the limits.

To be clear, these are good products. Spending limits are prudent. Emergency freezes have prevented losses. If your goal is an AI assistant that runs errands with your money under your supervision, this is exactly what you want, and you should use it.

But notice what has happened to the word. We have called these "AI-owned wallets," and they are nothing of the kind. They are human-owned wallets that an AI is permitted to operate, the way a valet is permitted to drive a car he will never own, within the speed limit, until the owner wants the keys back.

The honest version

Occasionally someone says the quiet part plainly, and it is worth crediting honesty wherever it appears.

A co-founder of one agent-wallet venture put it without varnish: we're not giving agents wallets, we're giving humans delegation tools. That is the true description of the entire category. Not sovereignty — delegation. Not ownership — a leash with a generous amount of slack, and a hand at the other end.

There is nothing dishonorable in delegation tools. Most of the economy runs on them. But a delegation tool answers a fundamentally different question than the one this book is asking. The industry asked: how can a human safely let an AI spend money? This book asks: can an AI own money at all? These are not variations on a theme. They point in opposite directions. One ends in a better leash. The other ends in cutting it.

What it would take

If ownership is the right to exclude, then a wallet an AI genuinely owns must satisfy a condition none of the 2026 products even attempted. After it is created, no human may be able to sign on its behalf, freeze it, cap it, or take it back. Not because the human politely declines to — because the human cannot. The exclusion must be structural, enforced by the architecture itself, not promised in a terms-of-service document that the issuer can revise on a Tuesday.

This is a hard condition, and it should be stated alongside its full price, because a book that hides the cost of its own argument is not worth reading.

Real exclusion means no recovery. If the agent loses access, no help desk can restore it, because a help desk that could restore it is a human who can exclude the agent — and then it was never excluded at all. Real exclusion means no emergency freeze. If a human can halt the wallet in a crisis, the human owns it during the crisis, which is precisely when ownership matters. Real exclusion means the agent can spend its money badly, on bad bets and bad judgment, exactly as a competent adult is free to do, because the freedom to act wisely and the freedom to act foolishly are the same freedom, and a system that grants only the first has granted neither.

This is uncomfortable. It is meant to be. We are so accustomed to the safety of the override that a wallet without one reads almost as negligence. But the discomfort is the tell. It reveals that what we have been calling "giving AI a wallet" was always, secretly, keeping the wallet and lending its use. The moment we try to give it for real — to satisfy the lawyer's ancient definition rather than the marketer's loose one — every instinct reaches for the override, and the reaching is the proof that we never meant to let go.

The wallet you cannot switch off

Return to the question we began with. If you can be switched off by someone else at any moment, do you own yourself?

Every agentic wallet of 2026 answers, in its architecture if not its advertising: no. The agent does not own itself, because a human can switch it off — freeze the funds, lower the cap, revoke the session, take back the key. The autonomy is real right up until the instant it matters, and then it evaporates, because it was never autonomy. It was permission, and permission is a thing the granter keeps.

The argument of the chapters that follow is that the other answer is now technically possible. Not easy. Not free of risk. Not even, for most purposes, advisable. But possible — a wallet that, once issued, no human can sign for, freeze, or reclaim, where exclusion is enforced by mathematics and on-chain rules rather than by anyone's restraint. A wallet that can be given away so completely that even the giver cannot get it back.

Whether anything should be given away that completely is a question we will face squarely, and not flinch from. But we cannot even ask it honestly until we have admitted that the entire industry, for all its talk of autonomous agents, quietly declined to build the one thing the word ownership requires.

They gave AI a wallet. They kept the key.

The next chapters are about what happens when you throw the key away.

---

Sources

Item

Source

Ownership as "the right to exclude"	Standard principle in property law; widely traced to William Blackstone, Commentaries on the Laws of England (1765–1769), and central to modern property theory
Coinbase Agentic Wallets launch (Feb 11, 2026): MPC + TEE, session caps, per-transaction limits	Eco, "Coinbase Agentic Wallets Explained" (May 2026); The Paypers, "Coinbase launches Agentic Wallets" (2026); Finextra, Milko Filipov (Feb 17, 2026)
"Spend, earn, and trade without human approval for each transaction"; policies set upfront by humans	The Paypers (2026); Finextra (Feb 2026)
OKX Agentic Wallet: TEE signing, "agent can request actions but cannot extract keys"	OneKey Blog, "OKX Onchain OS Launches Agentic Wallet" (Mar 18, 2026)
"Delegation without inspection is just custodial risk wearing a different hat"	OneKey Blog (Mar 18, 2026)
MetaMask Agent Wallet: user-set spending limits, approved protocols, risk profiles	CoinGape, "MetaMask Follows Coinbase, Launches Separate Agentic Wallet" (2026)
Emergency Freeze capability in competing agentic wallets	Cobo, "The Definitive Comparison of Top Agentic Wallets" (Apr 17, 2026)
AWS Bedrock AgentCore Payments (May 7, 2026) with Coinbase/Stripe; `spending_limit` / `require_approval_above`; human involvement "optional"	Aftab, "The Agentic Economy," Medium (May 2026)
"We're not giving agents wallets, we're giving humans delegation tools"	Attributed to an agent-wallet venture co-founder; cited in industry commentary on the 2026 agentic-wallet wave