an AI agent with a crypto wallet needs a spending policy, not a better prompt

Most AI wallet demos focus on whether an agent can swap, bridge, stake and rebalance on its own.

That is the easy part.

The hard part is what happens when the agent reads a poisoned webpage, misunderstands a token, retries a failed transaction or follows an instruction that was never meant to control money.

A normal wallet asks for approval one transaction at a time. An agent wallet probably needs policy before execution.

It should know the maximum value it can move each day.

It should have an allowlist of chains and contracts.

Slippage, gas, bridges and token approvals should have hard limits.

Some actions should always require a human signature.

Every active permission should have one immediate kill switch.

The agent should also show a plain language receipt before acting. What it saw. What assumption it made. What it plans to spend. What would make it stop.

Prompts are not a security boundary. A convincing website can change what a model believes. The wallet policy has to stay outside the model and fail closed.

The useful question is not whether AI can manage a wallet. It is how much authority it should receive before it has earned any trust.

Would you let an agent rebalance a small wallet if every transaction sat inside a hard policy, or is onchain autonomy a bad idea even with those limits?