Ethereum ERC-8350 Proposal Secures AI Agent Memory Updates

A new Ethereum proposal, ERC-8350, introduced on July 14, 2026, outlines a method for autonomous AI agents to prove memory changes without exposing the actual data on the blockchain. The draft defines an agent memory registry that records only cryptographic commitments linked to an agent’s private data, ensuring privacy while maintaining verifiability.

The proposal addresses the need for agents to register memory changes without revealing the content itself. Each update is encapsulated in a signed structure called an ExperienceDelta, which is hashed into a unique Transition ID. The system enforces continuity by requiring sequence numbers and prior state roots to match, preventing out-of-order updates. Sensitive data like raw memory, encryption keys, and storage locations are explicitly excluded from the registry to protect privacy.

The authorization model involves a controller and an authorizer, which can be standard accounts or smart contracts following ERC-1271. Signatures must use an EIP-712 signing domain to prevent replay attacks across different chains. The contract enforcing these rules is designed to be immutable, ensuring security by preventing any upgrades that could compromise the system’s integrity.

A reference implementation, AgentMemoryStateRegistry.sol, has been provided to demonstrate the proposal’s functionality. The authors, Everest An, XiaoHai, Luo, and Eric, emphasize that while the registry ensures authorized state transitions, it does not verify the actual availability or truthfulness of the committed memory, leaving such guarantees to separate verification mechanisms.