This Dev newsletter covers American Express’s cell-based payment system for high availability, a persistent agent memory layer on Elasticsearch, and a large-scale malware campaign on GitHub. It also highlights AI agent security roadmaps, GDPR consent fines, compiler reproducibility fixes, and new autonomous agent frameworks.

• A team built persistent agent memory by layering episodic/semantic/procedural Elasticsearch indices, hitting 0.89 recall with zero cross-tenant leaks
• Attackers flooded GitHub with 10,000 malicious repos hiding Trojans in ZIPs, constantly swapping readme links and commits to outpace detection
• Norway's DPA fined Elkjop €1.8 million for illegally forcing marketing consent as a condition of customer sign-up, a clear GDPR violation
• American Express uses a cell-based architecture where independent processing "cells" isolate failures so one crash doesn't cascade across the payments system

AI agents now execute tasks and transactions across systems but lack portable identity, programmable payments, and verifiable governance. Public ledgers, wallets, and stablecoins offer on-chain credentials, embedded payments, and transparent execution logs to ensure agents act as accountable economic actors.

• Non-human identities in finance already outnumber humans roughly 100 to 1, but these agents remain "unbanked" — their permissions and payment credentials don't transfer across platforms.
• Real accountability requires cryptographic guarantees at every layer (training data, prompts, action logs, instructions) since even decentralized governance fails if one provider can quietly push new model weights.
• Stablecoin-based machine payments are already live at scale: Stripe's MPP processed 34,000+ transactions in its first week at fees as low as $0.003/call, while Coinbase's x402 (adopted by Cloudflare, Vercel, and Google) handles about $1.6 million/month after removing wash trading.
• New CLI wallets like AgentCash let agents draw from one stablecoin balance to autonomously pay for data, tools, and compute — bypassing storefronts and sales teams entirely.