Holonym Foundation Quarterly Update: Q2 2026

This report covers Holonym Foundation's progress across Human Passport and WaaP, alongside ecosystem-wide efforts from human.tech, April through June 2026.

---

Key Announcements

General (human.tech)

• TAP announced: the Tool Authorization Protocol runs company operations through a proxy that injects credentials only after a policy check. Sensitive actions still need human approval. read the announcement
• TridentGold: Barbados announced TridentGold, a citizen-held national digital identity programme built on the human.tech stack, and demonstrated it live in Bridgetown on May 29. read more
• human.tech's AI strategy went public: co-founder Nanak Nihal Khalsa published an essay on how the company runs itself on AI, and announced it on X in June. read the essay
• Shield's build-up continued: the privacy bridge to Aztec was named Shield in May. It completed a Nethermind security audit and previewed its entry-and-exit screening design publicly through the quarter. see the audit record

Human Passport

• NFC Passport launched: verify humanity using a biometric passport's NFC chip, powered by ZKPassport, through a free one-time attestation that lasts three months in Passport, or a $3 proof that lasts a year. read the thread
• Ethereum Security QF Round gated by Passport: donations to TheDAO Security Fund's round on Giveth required a Passport Models score of 50 or more, or a Stamps score of 15 or more. see our project page
• Galxe Covenant quest: the Manifestation quest asked participants to sign The Covenant and verify humanity through Passport, part of Galxe's fifth anniversary celebration. see the quest

human.tech Wallet Protocol

• WaaP CLI live on Sui with Privileges: agents hold scoped capabilities instead of a private key, with a policy check before every transaction. read the launch thread
• OpenClaw integration shipped: OpenClaw agents now carry WaaP's Privileges. read more
• Framework distribution grew: WaaP kept building its case for delegated agent authority, and set out a wallet provider for Coinbase's AgentKit.

Community

• Ethereum Security QF Round: human.tech applied to TheDAO Security Fund's 500 ETH matching round on Giveth, with agent wallets as the pitch. Passport did a separate job in the same round, gating donations against Sybils. see our project page
• Covenant × Galxe raffle: the Manifestation quest ran a $500 raffle through May 1, and Galxe featured The Covenant on its Explore page. see the feature

---

human.tech

Q2 was the quarter the company turned its own AI-native operations into a product and brought the stack to a national government. It put the case to regulators that accountability does not require collecting more data. And it finished building up to Shield, the accountable privacy bridge to Aztec.

Campaigns

Ethereum Security QF Round (TheDAO Security Fund on Giveth)

TheDAO Security Fund ran a Quadratic Funding round on Giveth from April 23 to May 15. human.tech applied as one project, and the pitch was agent wallets: two-party signing with a verified human in the loop. We published a supporting post inviting the ecosystem to back the round.

Passport's part in the round was separate, and on the other side of it. The round used Passport scoring to keep Sybils out of the donor set, which matters more in quadratic funding than anywhere else, because breadth of donors moves the matching pool more than the size of any donation. read the post | see our project page

The Covenant × Galxe: Manifestation quest

Galxe's fifth anniversary featured The Covenant of Humanistic Technologies as a Manifestation quest on GalxeQuest, live April 14. Participants read the ten principles, signed the declaration, verified humanity through Passport, and claimed an OAT. A $500 raffle ran through May 1. see the quest | see the Explore feature

Partnerships & Collaborations

TridentGold: Barbados' national digital identity on human.tech

Barbados announced TridentGold and demonstrated it live in Bridgetown on May 29. TridentGold is a citizen-held national digital identity programme, built on the human.tech stack. Each citizen holds their identity on their own phone. The government can verify claims but cannot read the underlying data. The programme commits to 60 working government services by Barbados' 60th anniversary of independence on November 30. The first service, TridentArrow, digitises travel between Barbados and Guyana. The first zero-knowledge crossing of its kind is targeted for November 30, with a Barbadian and Guyanese delegation. read the announcement

See the post on LinkedIn

The Regulatory PETshop at Georgetown Law

human.tech sponsored the Regulatory PETshop at Georgetown University Law Center on May 27, hosted by the Institute of International Economic Law and the Decentralization Research Center. We prepared a regulator's brief on Proof of Clean Hands for it, arguing that financial compliance has always meant collecting more data, and that it does not have to. Verification and accountability can hold without building a store of personal information in the first place.

See the post on LinkedIn

human.tech × Aztec: the road to Shield

The privacy bridge to Aztec, now named Shield, kept building toward its public launch. The name was ratified in May, and shield.human.tech went live in June. Nethermind's security audit of the bridge contracts, covering both the Ethereum L1 and Aztec L2 Noir code, was completed in May. see the audit record Public teasers ran through the quarter, describing a bridge that screens both ends of a transfer: entry and exit. see a teaser

Product

Announcing TAP

On June 30, human.tech announced TAP, the Tool Authorization Protocol. TAP grew out of running the company on AI agents. With it, the team moves funds, modifies production deployments, changes domain names, and controls dozens of external tools. TAP routes those operations through a proxy that injects credentials only after a policy check, and sends sensitive actions to a human approver. The team describes it as a safer, simpler alternative to MCP and skills, released open source under the Apache 2.0 License. read the announcement | read the thread | visit TAP

HUMN Writings & Thoughts

"2PC Agent Wallets with Verified Human-in-the-Loop"

Published May 8, this post explained WaaP's two-party computation model and asked the ecosystem to support human.tech in TheDAO Security QF Round. read the post

"The Authorization Layer for AI Agents"

Published May 20, this post argues that agent frameworks make agents capable, but none of them decide what an agent may sign. WaaP works at exactly that gap, the point of signing. read the post

"human.tech's AI Strategy"

Nanak Nihal Khalsa published an essay on human.tech's AI strategy on June 9. The company announced it publicly on X June 14 and 15. The thread reported that some roles at the company got 30 times more productive this year, running on AI-native operations. read the essay | read the thread

In the Press

Q2 was a quiet quarter for coverage. Two pieces, both featuring co-founder Shady El Damaty.

• Metaverse Post, "Why Web3 Still Struggles To Reach Mass Adoption" (April 21): a panel recap on what keeps web3 from reaching ordinary people, alongside Base, Tenderly, Sonic Labs and Offchain Labs. read the piece
• TheStreet, "The future of finance is becoming harder to ignore" (May 16): Shady on the CLARITY Act and what it changes for digital finance. read the piece

---

Human Passport

Human Passport is proof of personhood for web3. It keeps Sybils and bots out of airdrops, funding rounds and governance votes. It does that without asking a real person to surrender their identity. Passport aggregates several verification methods into one score rather than trusting a single check. One spoofed or unavailable method does not break the whole system.

Q2 brought a new verification path, a funding round gated by Passport, and continued education on pluralistic proof of personhood.

Product Updates

NFC Passport

Launched publicly June 10, NFC Passport lets users verify humanity using a biometric passport's NFC chip, powered by ZKPassport. The proof runs locally on the user's device. Two tiers are available: a free one-time attestation that lasts three months in Passport, and a $3 proof that lasts a year. All three government ID verification paths, NFC included, score the same Government ID Stamp. read the thread

See the post on X

Campaigns & Case Studies

Gating the Ethereum Security QF Round

TheDAO Security Fund ran its Quadratic Funding round on Giveth from April 23 to May 15, backed by a 500 ETH matching pool. Passport gated eligible donations: a Models score of 50 or more, or a Stamps score of 15 or more. Quadratic funding rewards the number of donors rather than the size of each donation, so a Sybil farm distorts a round more than a whale does. see our project page | see the announcement

Galxe: Covenant Manifestation quest + Passport Score credential

The Covenant Manifestation quest on GalxeQuest asked participants to verify humanity through Passport as one of its steps. see the quest On June 25, Passport pointed builders to the Passport Score credential on Galxe, which any project can use to gate its own campaign. see the announcement

Content & Education

• The Linea Voyage case study resurfaced on X, highlighting 207K+ participants verified through Passport during the campaign. see the case study | see the post
• Content through May explained the Models API: passive scoring of wallets from on-chain behaviour across five chains, with no action required from the user. A score of 50 or more reads as likely human; a score of minus one means there is not enough data, and the wallet routes to Stamps instead. see the post
• A twelve-part thread argued that community growth and vanity metrics sit uncomfortably close together, then named the integrations that separate them: Unlock, Discourse, Formo, Collab.Land, Snapshot, Layer3 and Galxe. read the thread

Stats

Where Passport stood at the end of Q2 2026 (as of the June 10, 2026 scorer snapshot):

* A verified account is an account that completed at least one verification. It is not a count of accounts that clear a passing score, which every project sets for itself.

---

human.tech Wallet Protocol

The human.tech Wallet Protocol, WaaP for short, is wallet infrastructure with no seed phrase. The key is not on the user's device and it is still theirs: it lives in a secure enclave only they can sign with, and they can export it at any time. Q2 brought agent wallets and Privileges to Sui, added an integration, and pushed the case for delegated agent authority across new frameworks.

Product Updates

WaaP CLI on Sui, with Privileges

Announced April 27, WaaP CLI brought agent wallets to Sui, with Privileges live on the chain. An agent holds scoped capabilities, not a private key, and Policy runs before every transaction. A Privilege is a scoped, expiring pre-approval: a spending ceiling, an expiry, and a contract allowlist. read the launch thread

See the post on X

Partnerships & Integrations

OpenClaw

WaaP announced Privileges for OpenClaw agents on May 21. read the announcement

Coinbase AgentKit

WaaP set out a wallet provider that implements AgentKit's own interface, so switching costs one configuration change. The provider is still in development. The argument behind it stayed constant through the quarter. An agent should never hold its own private key.

Content

WaaP's content through Q2 argued that agents should hold capabilities, not keys, and connected that argument to the EU AI Act's Article 14 human-oversight requirement, enforceable from August 2. A separate post cited Keyrock's May report: AI agents settled $73 million across 176 million transactions last year.

---

Summary

Q2 2026 turned months of build-up into shipped product and public commitments.

TAP took the way the company runs itself on agents and packaged it as a security layer other teams can use. TridentGold put the human.tech stack to work for a national government. Shield's name, audit, and public teasers set up its launch on Aztec.

Human Passport added a verification path that reads a passport's NFC chip, gated a security-focused funding round, and kept publishing on pluralistic proof of personhood.

WaaP extended agent wallet infrastructure to Sui, shipped Privileges on the new chain, and pushed the case for delegated agent authority through OpenClaw and the wider framework ecosystem.

What's Next

• Shield, the accountable privacy bridge built for entry-and-exit screening, launches on Aztec in July
• Clean SDK, the developer layer behind Shield, is coming to npm
• An essay on Proof of Clean Hands (PoCH) is coming
• The WaaP SDK's Squid Mode, which raises signing to 2PC-MPC across our enclave and Ika's network so nobody can sign alone, is still to come
• The WaaP plugin for ElizaOS is in progress

Thank you to the builders, partners, and community members who shaped Q2.

For more frequent updates, join our Telegram group: t.me/humantechofficial

About human.tech

Holonym Foundation builds human.tech, the identity and control layer between people, institutions, and AI. Used by governments, protocols and platforms.

human.tech