Robinhood put an AI agent in charge of real money.

Every other agent launch this year asked the same question: who lets software spend their money? Robinhood answered it on Monday night in Houston. Robinhood Agents, unveiled at HOOD Summit 2026, puts an AI agent inside the brokerage app that can research markets, build strategies, and place trades with customer funds. The announcement is full of the usual superlatives. The guardrails are more interesting than the superlatives.

Start with what Robinhood got right, because the design is the closest thing to an industry standard for agents that move money. Three choices stand out.

First, the agent gets its own account. Agents can only access funds in a dedicated agentic trading account the customer opens at setup. The blast radius is a number the customer chose, not their whole portfolio. Second, manual trade approval defaults to on. The setting appears during setup, is switched on by default, and can be adjusted at any time. Third, everything the agent can do is inside Robinhood's own system. This is not an agent with a browser and your credentials. It trades through Robinhood's tools, within limits the customer sets.

Compare that to the default agent experience of 2026, where an agent with a login and a prayer executes whatever it decides is a good idea. Robinhood's design treats the agent like a junior trader with a defined book, a pre-trade approval workflow, and no access to the rest of the firm. That is the right mental model. It is also, notably, the model we argued for in our know-your-agent piece: identity, limits, and approval before autonomy.

Now the caveats, because a brokerage announcement is a sales document.

The pilot numbers deserve scrutiny. Robinhood says that since May, when it let tech-savvy customers connect their own third-party agents, more than 150,000 customers opened agentic trading accounts, and agents now use Robinhood's tools almost 30 million times a day. That is Robinhood's count of its own API traffic, not an independent audit. Thirty million daily calls from 150,000 accounts is 200 calls per account per day, which sounds like agents polling market data, not placing 200 trades. The number shows adoption of the plumbing. It does not show the agents are any good at trading.

The approval default is the load-bearing claim, and it is adjustable. "Defaults to on" is a strong design choice. "Adjustable at any time" means every user one tap away from full autonomy, and the announcement also promises Loops, a coming feature that turns a strategy into a standing instruction the agent executes "on repeat, around the clock." A loop with approval on is a nag. A loop with approval off is an unattended trading bot with your money. Robinhood says you can turn off a Loop whenever you like. The question is whether you will notice you need to.

Then there is the model. Customers pick from several labs including OpenAI, and GPT-Luna usage is free through the end of the year. A free model inside a trading agent is a customer-acquisition cost wearing a product feature's clothes. Fine. But the agent's judgment is the model's judgment, and the announcement says nothing about how the agent explains a trade, what happens when two signals conflict, or who is accountable when the agent misreads a headline on a Saturday. Weekend trading is coming too, pending regulatory review. An always-on agent plus weekend markets is a combination that will produce its first ugly story. It is a matter of when.

The demo, per secondhand accounts, had the agent pull congressional trades and social-media momentum stocks, filter for signals like unusual options volume, and buy. Replace the demo's one share with real position sizing and you have a momentum system running while you sleep. Momentum systems work until the moment they all do the same thing at once. Thousands of retail traders running similar agents from the same app is a correlated-behavior machine. Robinhood did not mention that.

So who holds the risk? Robinhood's announcement never says the words, but the design says it plainly: you do. The dedicated account caps the damage. The approval toggle transfers the decision. The free model gets you in the door. This is not a criticism unique to Robinhood. It is the honest shape of agentic finance in 2026: the platform provides the rails and the guardrails, and the customer provides the money and the consequences.

For operators building their own agent commerce, the takeaway is the checklist, not the product. Dedicated funding accounts. Approval on by default. Adjustable, but with the adjustment visible. Limits set at setup, in the customer's own words. Robinhood built the reference implementation. Whether it holds up when the first Loop runs unattended through a weekend headline is the test the industry is about to watch.