{
 "id": "erc-8196",
 "name": "ERC-8196: AI Agent Authenticated Wallet",
 "acronym": "ERC-8196",
 "aliases": [
  "EIP-8196"
 ],
 "collisions": [],
 "step": "permit",
 "parties": [
  "agent-payment",
  "agent-human"
 ],
 "form": "onchain-registry",
 "track": "community",
 "scope": "general",
 "question": "How can an asset owner let an AI agent transact from a wallet only within a policy the owner set, with proof and an audit trail for every action?",
 "analog": "A corporate card with spending rules enforced by the card itself, plus a tamper-evident statement",
 "origin": {
  "org": "Ethereum community (Leigh Cronian, Cybercentry; Chris Johnson, Virtuals)",
  "date": "2026-03-14"
 },
 "governance": "Ethereum EIP/ERC process (Ethereum Magicians discussion + ERCs repository); status Final",
 "native_status": "Final Standards Track ERC (Final 2026-07-21); requires ERC-4337 and ERC-8126",
 "phase": "stable",
 "implementation": "unknown",
 "adoption": {
  "level": "unmeasured",
  "by": null,
  "probe_run": null
 },
 "version": {
  "label": "Final, created 2026-03-14",
  "date": "2026-07-21"
 },
 "spec_url": "https://eips.ethereum.org/EIPS/eip-8196",
 "discovery": {
  "mechanism": "EVM smart-contract interface on an ERC-4337 account; policies are registered on the wallet contract",
  "path": "none — no well-known file; discovery is by contract address/ABI"
 },
 "probe": {
  "method": "eth_call",
  "path": "{contract_address}",
  "parse": "Contract implements the ERC-8196 functions (registerPolicy, getPolicy, revokePolicy, executeAction)",
  "on_absent": "Absence at a given contract address only shows that wallet does not implement ERC-8196; there is no registry of ERC-8196 wallets to enumerate."
 },
 "evidence": [
  {
   "claim": "ERC-8196 defines a standard interface for AI agent-authenticated wallets that execute transactions only with verifiable cryptographic proof that the action complies with a policy set by the asset owner. It is Layer 2 (Execute) above ERC-8126 (Layer 1, Identify and Verify), with credential delegation without exposing private keys, a hash-chained audit trail, entropy commit-reveal against host influence, and legacy credential delegation via TLS attestations. Status Final; requires 155, 191, 712, 4337 and 8126; created 2026-03-14.",
   "date": "2026-07-21",
   "label": "VERIFIED",
   "url": "https://eips.ethereum.org/EIPS/eip-8196"
  },
  {
   "claim": "The ERCs repository front matter for erc-8196.md reads status: Final; its commit history shows the move to Final on 2026-07-21.",
   "date": "2026-07-21",
   "label": "VERIFIED",
   "url": "https://github.com/ethereum/ERCs/blob/master/ERCS/erc-8196.md"
  }
 ],
 "summary_md": "ERC-8196 is a Final Ethereum standard for wallets that an AI agent can use but not abuse [1]. The asset owner registers a policy on an ERC-4337 smart account, and the wallet executes an agent's transaction only when it comes with cryptographic proof that the action complies with that policy [1]. Every session is logged in a hash-chained audit trail. A commit-reveal of entropy stops a host from steering a probabilistic agent by resampling, and credentials for legacy (non-chain) services can be delegated through TLS attestations without handing the agent private keys [1].\n\nIt is the execute layer of a two-layer stack by the same authors: ERC-8126 answers whether an agent is trustworthy, ERC-8196 whether this action is authorised now, and the spec encourages ERC-8126 Wallet Verification before granting control [1]. It reached Final on 2026-07-21 [2].\n\nThe dependency chain runs through ERC-8126 to ERC-8004, which is still a Draft (see the dispute on `erc-8126`). No deployed wallet implementing ERC-8196 was found in this pass, so implementation is unknown and adoption unmeasured.",
 "part_of": null,
 "group": null,
 "use_cases": [
  "delegate-user-authority",
  "audit-agent-actions"
 ],
 "audience": [
  "agent-builder",
  "platform"
 ],
 "pairs_with": [
  "erc-8126",
  "erc-8004"
 ],
 "prerequisites": [
  "erc-8126"
 ],
 "dispute": null,
 "last_verified": "2026-10-20",
 "history": [
  {
   "date": "2026-10-20",
   "note": "added from gap scout 2026-10-20; verified against eips.ethereum.org/EIPS/eip-8196 and the ERCs repository file and commit history (Final 2026-07-21)"
  }
 ],
 "watch": [
  {
   "type": "erc",
   "num": 8196
  }
 ],
 "freshness": "current",
 "url": "https://agenticweb.wiki/protocols/erc-8196/",
 "category": "permit",
 "type": "protocol"
}