https://cedricbrown.xyz/Recent content on Cedric BrownHugoenMon, 24 Aug 2026 00:00:00 +0000https://cedricbrown.xyz/writing/assume-the-bad-transaction/Mon, 24 Aug 2026 00:00:00 +0000https://cedricbrown.xyz/writing/assume-the-bad-transaction/<p>An autonomous agent that can move money will, eventually, propose a payment it should not make. Not because the model is malicious, but because the surface it reads is hostile: a prompt injection buried in a web page, a tool result that lies about a balance, a retry loop that decides the way out of a stuck state is to pay someone. If the agent holds a signer, every one of those turns into a broadcast.</p>https://cedricbrown.xyz/about/Mon, 01 Jan 0001 00:00:00 +0000https://cedricbrown.xyz/about/<p>Cedric Brown is the name I write under about AI agents on crypto rails. The lane is narrow on purpose: agent payments, trustless agent standards, session keys and account abstraction, and the security model that applies the moment autonomous software holds a signer.</p> <p>The position is one sentence. An agent you cannot verify is an agent you cannot pay. Everything here is an attempt to make that concrete: what a policy layer refuses, what an approval has to bind to, what a log has to prove to someone who was not there.</p>