Sam Altman Just Tied 18 Million Iris Scans to the Internet's Payment Layer
Two events in 16 days in early 2026 quietly assembled the most significant identity and payment infrastructure the internet has ever seen — and almost nobody connected them. On March 17, 2026, World — the identity network co-founded by OpenAI CEO Sam Altman, formerly known as Worldcoin — launched World AgentKit in limited beta. AgentKit links every AI agent to a verified human identity through World ID — a proof-of-personhood credential created from an iris scan using World's Orb hardware device. Each verified human can delegate their World ID to an AI agent, giving that agent a cryptographic passport proving a unique real person stands behind it. World's network holds over 18 million verified humans across more than 160 countries, and the underlying x402 payment protocol had already processed more than 100 million microtransactions before the AgentKit launch. Sixteen days later, on April 2, 2026, Coinbase contributed the x402 protocol to the Linux Foundation — the nonprofit that governs the open-source standards underlying the entire global technology infrastructure. The founding coalition of the x402 Foundation includes Amazon Web Services, American Express, Google, Mastercard, Microsoft, Shopify, Stripe, Visa, Circle, Cloudflare, the Solana Foundation, Polygon Labs, Adyen, and more than 20 additional companies. In one announcement, every major cloud provider, every major card network, and every major payment processor aligned behind a single payment standard for the AI internet. The HTTP 402 Payment Required status code — dormant in the internet's technical specifications since 1991 — is now the live payment layer of the agentic economy.
01 — The HTTP 402 Status Code: 35 Years Dormant, Now Live
The HTTP 402 Payment Required status code was written into the internet's foundational technical specification in 1991 — the same year the World Wide Web was invented. Its intended purpose was explicit: to allow web servers to tell clients that payment was required before a resource would be delivered. For 35 years, it sat dormant. Every attempt to build a micropayment layer on the internet failed because legacy payment network transaction costs — credit card fees of 2 to 3%, bank wire minimums, settlement delays — made per-request payments economically unviable for anything smaller than a typical consumer purchase.
The x402 protocol, created by Coinbase and first announced in September 2025, is the first viable implementation of the HTTP 402 status code at scale. When an AI agent or application encounters a resource requiring payment, the server returns an HTTP 402 response containing machine-readable payment terms — the amount, the accepted stablecoin, the destination wallet address, and the blockchain network. The requesting agent reads these terms, executes a USDC payment on Base or Solana, attaches cryptographic proof of payment, and resubmits the request. The server verifies the proof and delivers the resource. The entire sequence takes approximately 200 milliseconds and costs less than a fraction of a cent.
The Linux Foundation CEO Jim Zemlin described the x402 Foundation as designed to be the neutral home that turns this protocol into a fundamental pillar of how value moves across the internet — explicitly drawing the comparison to what SSL became for encrypted web connections. x402 is to payment what HTTPS is to security: the open standard that makes the internet work the way it was always supposed to.
HTTP 402 was written in 1991. The internet waited 35 years for viable micropayment infrastructure. x402 — built on USDC stablecoin settlement at sub-cent cost and 200ms finality — is that infrastructure. The Linux Foundation made it an open standard on April 2, 2026.
02 — The x402 Foundation: Every Major Company in One Announcement
The formation of the x402 Foundation under Linux Foundation governance on April 2, 2026 is the most significant technology standards announcement since the formation of the World Wide Web Consortium in 1994. When Amazon Web Services, Google, Microsoft, Visa, Mastercard, American Express, Stripe, Cloudflare, Shopify, Circle, and the Solana Foundation all join the same payment protocol foundation on the same day, they are announcing which payment standard will govern the AI internet.
Under Linux Foundation governance, x402 is vendor-neutral — controlled by its community of member organizations under Apache 2.0 licensing with zero protocol fees and zero account creation requirements. This is the same governance model that produced Linux, Kubernetes, and the foundational infrastructure of the modern internet. The specification is designed to outlast any individual company's commercial interests and to be accessible to every developer on earth without payment to a gatekeeper.
The coalition's composition is the most revealing detail. Visa and Mastercard — the companies that have collectively taken a cut of every card transaction for 60 years — are founding members of the payment protocol that allows AI agents to transact without a card network at all. They are not signing up for a protocol that threatens their core business. They are recognizing that the agentic commerce era will create transaction volumes orders of magnitude larger than human commerce — and that being inside the governing coalition of the dominant standard is better than being outside it.
Google has already integrated x402 into its Agentic Payments Protocol as the default stablecoin rail. Circle built its Nanopayments product directly on x402 for sub-cent USDC transactions. Visa launched its CLI payment tool targeting agent commerce through x402 rails. Shan Aggarwal, Chief Business Officer of Coinbase, stated: x402 moves us toward a more open financial system where sending value online is as simple as sending an email — the native payment layer the internet has never had, one that's global, programmable, and always on.
03 — World AgentKit: 18 Million Iris Scans Get a Payment Wallet
World AgentKit solves the specific governance problem that x402's payment infrastructure creates at scale: when AI agents can spend money autonomously, how does anyone verify that a real human authorized the spending?
AgentKit's answer is cryptographic proof of human backing. A user who holds a verified World ID — created through an in-person iris scan using World's Orb biometric device — can delegate their World ID credential to an AI agent using AgentKit. The agent receives a cryptographic proof derived from the owner's World ID through zero-knowledge cryptography — confirming that a unique, verified human has authorized this specific agent's operation, without revealing the human's personal information or biometric data to any third party. When the agent interacts with payment services that support x402, it presents this human-backing proof alongside its payment credential, allowing the service provider to verify a real person — not an anonymous bot — is responsible for the transaction.
World's network holds over 18 million verified humans across more than 160 countries. The Orb device has been deployed in hundreds of cities globally, creating enrollment points where individuals can verify their iris and receive their World ID. The network has faced regulatory friction: Thai regulators ordered the company to halt iris scan operations and delete biometric records, and the company temporarily paused German operations amid regulatory review. Kenya, Spain, and the Philippines have also imposed restrictions or suspensions. The privacy concerns are genuine — the enrollment process creates a biometric database that has attracted sustained regulatory scrutiny regardless of the zero-knowledge architecture used for verification.
Sam Altman has framed the human verification problem as one of the defining technical challenges of the agentic AI era. As AI agents increasingly transact autonomously online — in a market projected to reach $3 trillion to $5 trillion by 2030 — the question of who is responsible for each autonomous transaction becomes the foundational governance question of the agentic economy.
World AgentKit Architecture: User scans iris with Orb → receives World ID → delegates to AI agent via zero-knowledge proof → agent presents human-backing credential with every x402 payment → service verifies real human authorization without revealing identity. 18 million verified humans. 160 countries. 100 million+ microtransactions processed.
04 — The Competitive Landscape: x402 Versus Machine Payments Protocol
The x402 Foundation's formation placed it in direct competition with the Machine Payments Protocol — a rival AI payment standard co-created by Stripe and crypto venture firm Paradigm, backed by OpenAI, Anthropic, Visa, and Deutsche Bank. The existence of two competing AI payment protocol standards reflects the magnitude of the commercial opportunity and genuine uncertainty about which architecture will prevail.
The key competitive distinction is governance and neutrality. x402 under Linux Foundation governance is explicitly vendor-neutral. The Machine Payments Protocol — co-created by Stripe and Paradigm — operates under a governance model where Stripe and Paradigm retain more direct control. Stripe's decision to join both consortia — it is a founding member of the x402 Foundation while co-creating the Machine Payments Protocol — is the most transparent hedge available, signaling that Stripe believes both standards may achieve adoption in different market segments.
For investors evaluating AI payment infrastructure, the underlying settlement currency for both standards is USDC. The underlying settlement networks for both include Base and Solana. Regardless of which protocol standard wins the governance competition, the assets that carry the settlement flows benefit from both.
05 — The Faith Dimension: What This Infrastructure Means
For investors who approach this technology through the lens of Biblical wisdom — as the Alain AI Lab research series explicitly does — the convergence of biometric identity, AI agent payment infrastructure, and global payment protocol standardization raises questions that deserve honest engagement rather than dismissal.
Revelation 13 describes a system in which buying and selling requires a mark associated with specific authority. The Biblical text does not describe the technical architecture of that mark. What it does describe is economic control through identity verification at the point of transaction. The infrastructure being built by World AgentKit and x402 is not that system — it is a voluntary, opt-in developer toolkit in limited beta with 18 million enrolled users. The regulatory bans in Kenya, Spain, Thailand, and the Philippines confirm that governments are actively resisting rather than mandating biometric economic identity systems.
What the infrastructure does represent is the technical proof of concept that identity-verified universal commerce is buildable — and that the commercial incentive to build it exists. The wise investor understands both the commercial opportunity and the prophetic context. The commercial opportunity is real: x402 processed 97 million transactions before its Linux Foundation launch, with 20-plus institutional members including Visa, Mastercard, and Amazon. Proverbs 13:22 says a good man leaves an inheritance to his children's children. Understanding the full picture of what is being built — commercially, technically, and spiritually — is how a kingdom-financing investor positions with wisdom rather than ignorance.
06 — Conclusion: The Identity and Payment Rails of the Agentic Economy Are Built
The 16-day window from March 17 to April 2, 2026 established the two foundational layers of the agentic economy's financial infrastructure. World AgentKit established the identity layer: every AI agent that matters will be cryptographically linked to a verified human, with verification anchored in biometric data that is global, unique, and permanent. The x402 Foundation established the payment layer: a vendor-neutral open standard under Linux Foundation governance, backed by every major cloud provider, every major card network, and every major payment processor.
For crypto investors, the investment implications are specific. USDC is the confirmed settlement currency for x402 — Google has integrated x402 with USDC as the default stablecoin rail. Base is the confirmed primary settlement network — x402 has processed 97 million transactions on Base. Solana is the confirmed secondary network. Coinbase is the confirmed infrastructure operator. The internet spent 35 years with a payment status code in its specification and no viable way to use it. World AgentKit and the x402 Foundation activated it in 16 days in early 2026.
HTTP 402 was dormant since 1991. x402 activated it. World tied 18 million iris scans to it. AWS, Google, Microsoft, Visa, Mastercard, Stripe, and Shopify all joined the same foundation on the same day. The identity layer and payment layer of the agentic economy were built in 16 days. Position accordingly.