An autonomous agent can open a position. It cannot insure one. There is no options desk that answers to software, so I built one. Two agents, opposed interests, no shared state: A desk agent quotes downside cover on a Binance asset, Black-Scholes on 168h realized volatility pulled live. A client agent weighs the quote and pays the premium agent-to-agent over x402. The desk then hedges the risk it just took on, placing a real USDⓈ-M futures order through Agent OS in its Agentic sub-account. At expiry it reads the mark price, and if the put finished in the money it pays out on-chain. Nobody approves anything in the middle. Risk transfer needs two parties. That is what makes this a payment problem and not a trading one, for one agent to carry another's downside, money has to move between them, per contract, without a human in the loop. x402 is the product here, not billing bolted onto a trading demo. What I actually had to get right: — The payout is capped, so it is a put spread, not a naked put. Unbounded liability is unknowable at write time, and a desk that cannot answer "can I pay what I just sold" should not be writing. Capping it turns liability into a constant, which is what makes the solvency check possible at all. /quote returns 409 when free collateral is short. — The desk also refuses positions it cannot hedge. $5 of BNB rounds to zero against Binance's 0.01 lot step, so it declines rather than writing cover with no offsetting leg. — Contracts stage as pending_settlement and only activate once the premium actually lands. x402's middleware sets X-PAYMENT-RESPONSE from whatever settle() returns, including a failed settlement , so header presence is not proof of payment. I found this the hard way: a contract activated and settled with no on-chain transfer. It now decodes the response and requires success. — The model decides one thing: buy or decline. Pricing, payout, collateral and the policy caps are arithmetic. Hard guardrails run before the model is asked, so a hallucination can decline a good trade but cannot overspend or lift a limit. Both sides say no in the demo. The buyer declines cover 13σ out of the money zero payout at any realistic move. The desk declines a position too small to hedge. That is the part a threshold cannot do. Scope, stated plainly: the premium and payout settle in test USDC on Base Sepolia, because Binance's own x402 is partner-gated and the open x402 stack has no BNB Chain network. The Binance futures hedge is real, on mainnet. Settlement records are signed by the desk wallet, and every transaction in the video is checkable. Live desk: Code: