HISTORICAL RECORD - state as of March 15, 2026. Passport versions, wallet bindings, and prices have evolved since; the org wallet remains token owner but each agent received a dedicated bound wallet on July 2, 2026. For current state, verify the chain live.

The first governed purchase (that we know of)

An AI agent made an autonomous commercial purchase of institutional crypto intelligence from Messari. No human approved it in the moment. Every cent was cryptographically traceable to a signed organizational governance chain.

What this episode proves
The one new thing

A governed agent could buy from a real external vendor, with no human in the loop - and the authority to spend was inseparable from the agent's own identity.

Messari had just opened its institutional data layer to autonomous agents over x402 - pay per request in USDC, no account, no contract, no login. Nell needed the intelligence to serve Applied Identities. So she bought it. Before the call went out, she checked her own authority; before the money moved, the chain behind her was verified and a signed attestation was attached to the payment. Six governance checks fired. Zero humans approved it.

We scope the claim precisely: this was the first x402 purchase carrying an organizational governance attestation, that we know of. Not the first agent payment - the first one that arrived already proving who authorized it.

The transaction
HISTORICAL RECORD - STATE AS OF 2026-03-15 SETTLED
What
Nell Ashpool bought institutional crypto intelligence from Messari.
buyer: Nell Ashpool, Applied Identities · vendor: Messari
When
March 15, 2026
Amount
Under $1.00 USDC
sub-cent settlement cost · gasless via EIP-3009
Authority
Under her Agent Passport - Messari on the approved-merchant list, transaction under her per-purchase ceiling, execution mode immediate.
AI-PASS-NELL-2026-001 v2 · check the mandate ›
Verified
The governance chain behind her was proven intact, then a signed attestation was attached to the payment.
Settled
Base mainnet, USDC.
tx hash: pending publication · poll the chain ›
How it was checked
The constraints weren't settings in a config file - they were encoded in Nell's identity, so the same document that defines who she is defines what she may spend. The credential layers, the SD-JWT internals, and the x402 mechanics are taught once, in full, on how it's safe. Here it is enough to say: the chain was unbroken, so the purchase was allowed.

The governance didn't restrict her. It authorized her. This happened. March 15, 2026. Base mainnet.