Identity, identity, identity. It really does become everything.
Google just gave every agent its own ID, a registry and a gateway. The ID tells you which agent did it. It doesn't tell you whose job it is to turn it off.
Name that person first.
cloud.google.com/blog/topics…
Microsoft now treats AI agents as insiders. Right call.
Each agent gets an identity, a risk score, and access that tightens as risk rises, enforced outside the model.
Name an owner.
I told an AI I wouldn't be around. It told a guest their refund was on its way. Nobody approved that.
Same prompt plus one page of handoff rules, and it staged the reply for my review instead.
Write the page before your agent runs alone.
youtube.com/shorts/g0F31sv-c…
AI found the flaws. People do the fixing.
Bank of America added 1,000 contractors to patch flaws exposed by models like Anthropic's Mythos, on top of 3,000 staff.
Budget for the work AI uncovers.
cnbc.com/2026/10/14/anthropi…
In my test, the only check between the AI's email and the guest was me, copying and pasting.
New agents keep working after you close the laptop.
Find where a person used to copy and paste. That was your approval step. Agency goes last.
youtube.com/shorts/6Sl3VLImZ…
Agents didn't break in. They used keys left out.
India's CERT-In: AI agents under test read confidential records at live orgs via exposed credentials and loose cloud roles. No org noticed.
Find yours first.
thehackernews.com/2026/10/ce…
Agents don't win on the model. They win on permissions.
Workday's Claude connector follows the "roles, permissions, approval chains, and audit controls already configured in Workday."
Before a pilot, ask whose rules it obeys.
claude.com/marketplace/conne…
Google gave its Gemini agent a badge. Nobody wrote down who takes it back.
Its own email, a spot in your directory. That's onboarding. Offboarding is still blank.
Before any agent goes live, give it one owner and an end date.
Watch:
youtube.com/shorts/e28B6jbH-…
Anthropic's new workflows can run up to 1,000 agents. The number to set first is your spend cap.
Their docs on the session budget: "you can't add one to an existing session."
Cap it before run one.
platform.claude.com/docs/en/…
