Ledger Names First Chief Human Agency Officer, Lays Out AI Security Roadmap
Ledger has appointed a dedicated executive to oversee human oversight of AI agents and published a phased security roadmap, as the hardware wallet maker positions itself as a trusted infrastructure layer for the emerging agentic economy.

Paris-headquartered Ledger announced on April 14, 2026 that Ian Rogers, previously the company's Chief Experience Officer, has been appointed to a newly created role: Chief Human Agency Officer. The company, which counts tens of millions of hardware wallet users globally, released a formal security roadmap on the same date, addressing one of the most consequential risks in crypto today: AI agents with access to on-chain wallets can execute financial transactions autonomously, without per-step human oversight, according to the company.
What the Roadmap Covers
Ledger's technical strategy is built around a principle the company calls "Agents Propose, Humans Sign." Under this architecture, an AI agent can plan and recommend financial actions, but every transaction still requires physical confirmation on a Ledger hardware device before it executes. The hardware's Secure Element chip provides what the company describes as a hardware root of trust, a tamper-resistant foundation designed to deliver security guarantees that software-only systems cannot match.
The roadmap runs in two near-term phases. In Q2 2026, Ledger plans to introduce hardware-anchored identities for AI agents. Today, agent identity is largely software-based and straightforward to forge; the new system would replace that with cryptographically verifiable credentials tied to hardware. In Q3 2026, the company intends to launch a formal human-in-the-loop approval layer, giving users a Trusted Display interface to review proposed agent actions and configure pre-set spending limits or smart contract whitelists. A progressive attestation system designed to verify that a real human stands behind any agent interaction is also planned, targeting bot spam and multi-account abuse in agentic environments.
One integration is already live. MoonPay deployed Ledger's open-source Device Management Kit (DMK) in March 2026, launching an AI agent CLI (command-line interface) wallet in which every agent-proposed transaction requires a physical approval step on a Ledger device. MoonPay CEO Ivan Soto-Wright said at the time: "Autonomous agents will manage trillions in digital assets. But autonomy without security is reckless. We built MoonPay Agents with Ledger so intelligence can scale without surrendering control."
Why the Threat Is Escalating Now
Ledger CTO Charles Guillemet has been direct about the scale of the shift. "Finding vulnerabilities and exploiting them becomes really, really easy," he said earlier this month. "The cost is going down to zero." Guillemet has also warned about the broader security economics of AI: "There is no 'make it secure' button. We are going to produce a lot of code that will be insecure by design."
The numbers support his concern. According to industry data cited by Ledger's CTO, crypto losses to theft and exploits reached $1.4 billion over the past year, with the Drift protocol attack in April 2026 alone accounting for $285 million and a Resolv protocol breach in March costing $25 million. Security researchers have documented 26 cases of LLM routers (intermediary services that sit between users and AI models) secretly injecting malicious tool calls (unauthorised function invocations that redirect agent behavior) into agent workflows. One such attack drained an Ethereum wallet of $500,000. Across agent skill marketplaces, 341 malicious skills targeting OpenClaw-based bots have been identified.
Real-world incidents illustrate the urgency. Ledger's own research documents a solo operator who used an AI assistant to uncover more than 20 vulnerabilities across Mexican government agencies in under 72 hours. Separately, a Chinese state-sponsored campaign relied on AI to autonomously execute between 80 and 90 percent of tactical operations across 30 entities worldwide. The broader security environment has deteriorated in parallel: 3,322 data compromises were recorded globally in 2025, up 79 percent over five years, and 16.8 billion records were exposed in 2024 alone.
Rogers, now carrying the CHAO title, framed the stakes plainly in a recent post: "An agent is AI that can use tools. The second it can use tools, it has access to value." He added: "If you're building agents, don't treat security like a feature. It's the foundation."
Why This Matters Outside the United States
The security gap Ledger is addressing carries particular weight in the regions driving the fastest crypto adoption growth. India ranked first in the 2026 Global Crypto Adoption Index, compiled using Chainalysis methodology across 151 countries. Nigeria ranked second. Ethiopia, Kenya, and Ghana all entered the top 20 for the first time this year. Africa's total crypto wallet user base reached approximately 75 million in 2025, growing at 38 percent year over year, the fastest rate of any region globally. Stablecoin adoption across Sub-Saharan Africa surged 180 percent year over year, driven by remittances, everyday merchant payments, and savings dollarization, the practice of converting local currency holdings into stablecoins to hedge against currency devaluation.
Those same use cases, recurring modest-value transfers, are among the transaction types analysts expect AI agents to automate first.
Users in Nigeria, India, and Kenya predominantly access crypto through mobile-first custodial exchanges or software wallets, environments with no hardware anchor and therefore no hardware-enforced approval step. That structural exposure is compounded by a widely noted knowledge gap around private keys, seed phrases, and self-custody practices among first-time users in these markets, reflected in wallet adoption data published by CoinLaw in 2026.
The Ledger DMK is available now under an open-source license, meaning developer communities in Lagos, Nairobi, Bengaluru, and Karachi can integrate hardware-level signing into their own applications without building security infrastructure from scratch.
What Comes Next
McKinsey projects that AI agents will mediate between $3 trillion and $5 trillion in global consumer commerce by 2030. Crypto industry analysts, as reported by CoinDesk, project the broader autonomous agent economy could reach $30 trillion by the same year.
Regulators in Nigeria and Kenya, specifically the Central Bank of Nigeria and Kenya's Capital Markets Authority, are already working to formalize crypto frameworks in 2026. As AI agents begin executing on-chain transactions autonomously, the "Agents Propose, Humans Sign" model Ledger is building around may become a reference point for custody and disclosure requirements across emerging market jurisdictions.
Rogers offered a longer view on where all of this leads. "Future humans are orchestrators of agents," he has written. "Validation without security is nonsense."