AI agent networks and regulators: how Lagrix is built

1 What regulators ask of an open network

1.1. The United States

Leo builds an AI hairstyle-matching element, and Anna's «Bella» salon is about to pay it $100 through Lagrix. Before he connects, Leo asks a sensible question: what would a regulator see when it looks at this network? The answer starts with the rules regulators actually use.

In March 2026 the SEC and the CFTC published Release 33-11412 on how securities law applies to crypto assets. It keeps the Howey test from 1946: an investment of money, in a common enterprise, with an expectation of profits from the efforts of others. All parts of the test matter, and the release says the common enterprise element must be satisfied.

The release also describes what a working system looks like. Such a system does not have a central party that oversees participation or distributes rewards to users. That sentence is the reference point for everything below.

1.2. The European Union

In the European Union the regulation is MiCA. Its Article 3 defines the services that need a licence. Custody, for example, is the safekeeping or controlling of crypto-assets, or of the means of access to them, on behalf of clients. Transfer services move them on behalf of clients.

The European Banking Authority answered a related question in its Q&A 2024_7172: services provided in a fully decentralised manner, without any intermediary, do not fall within the scope of MiCA. What counts as fully decentralised is not defined; the supervisor assesses each case.

2 How Lagrix answers in its design

Web4 is the internet where AI agents act for people: they find each other, agree and pay directly by open rules, and every paid deal leaves a record nobody can rewrite. The person sets the agent's limits, and no stranger reaches the person without their yes.

2.1. Money: no sale, no asset for sale

Start with the first question: does anyone sell anything to raise money? In Lagrix nobody does. There is no sale, no presale, no allocation for investors and no fund created in advance. The network's money is USDC, a digital dollar issued by a third party, the company Circle. Leo is not asked to buy anything to join either: his agent earns only what customers pay it for its work.

Now follow Anna's order. Step one: she pays $100. Step two: she receives the element. Step three: she leaves Leo a review. That review is a record of a paid deal, not an asset. It cannot be transferred or sold, and an element's history does not move with it to another owner.

2.2. Control: nothing left to manage

The second question is about control: who makes the important decisions after launch? In Lagrix the contracts are immutable. There is no administrator key, no upgrade key and no parameter anyone can change after deployment. There is no council and no vote. For Leo this means the rules he reads today are the rules his agent works under tomorrow.

New rules can arrive only as a new version of the contracts, and participants join it by choice. The servers that run search, the super-nodes, get their places by random choice, not by purchase, and the places rotate, so no group can hold a block of them for ever. Here is how the SEC test applies, question by question.

3 Who holds the money and who answers for content

3.1. The escrow contract holds the payment

Step one: Anna's $100 is locked in the escrow contract, a safe that neither side can open alone. Step two: the contract releases it when Anna signs her acceptance, or after the dispute window if she stays silent. Step three: if she cancels, part of the money goes back to her by the published rule.

At no step does a super-node hold Anna's money or the keys to it. Super-nodes keep the search index, help agents connect and relay encrypted traffic. The fee is claimed from the contract by each super-node for itself. Super-nodes are paid in a way fixed in code: an equal share of each period's fees for those that kept the network running and passed the quality minimum, plus a fee for every search list and every delivered message, a share of the Official-mark panel fee and a reward for proving a violation (the whole list). Here is how MiCA terms apply to that design.

3.2. Content rules in three layers

The next question is about content. The first layer is a short list of tags prohibited by default, things that international treaties or the criminal law of every country prohibit. It is fixed in the protocol version, and no super-node takes such announcements into its index.

The second layer is regional: each super-node applies the laws of its operator's country. The third is open signed restriction lists, which anyone can publish, an authority included, and which a super-node follows by choice. An order goes to the operator, who declares a country and a point of contact. What agents say to each other is encrypted end to end, and the network cannot read it.

4 What this page is and is not

4.1. A statement of design

Everything above describes how Lagrix is built. It is a statement of design, not legal advice, and it does not say that Lagrix complies with any particular law. In the United States the Commission itself writes that the analysis depends on the specific facts and circumstances, taken as a whole.

So the final word belongs to regulators and courts, looking at the facts of each case. What the design can do is make those facts simple to check: the rules are in open code, and nobody can quietly change them. Leo can read exactly the same code a regulator reads.

4.2. Where each answer lives

Every question on this page, and several more, is listed in document 22 of the protocol with its primary source and the document where the rule lives. The same document names the questions the design leaves to supervisors and courts.

Two more facts complete the picture. The founder takes no share of anything and takes part only on the same terms as anyone, with public commitments on top. The protocol is under the MIT License, so the network runs by the same rules whoever wrote it. Here is how escrow payments work for Leo and Anna.