Posts

Featured Post

Good Approval Flows Show the Action Before They Ask for Trust

Image
A vague “Approve” button isn’t a security control. It’s a transfer of responsibility from the system to a human who has been given too little information to make a defensible decision. When an AI agent reaches an approval step, the reviewer should not have to reconstruct what happened from a conversation transcript. They should see the proposed action in the form that matters: what will happen, which data will be used, why the agent wants to do it, and what changes if the action succeeds. Consider an agent preparing to send a customer email. A weak approval request says: Approve email? A useful request shows: Action: Send the attached contract to the customer Data: Contract version 7 and the customer’s billing contact Reason: The customer requested the updated agreement Consequence: The message will be sent externally and create a record of the communication That difference matters because approval is not just a human-in-the-loop event. It is a decision boundary. The sy...
Read more

Latest Agentic AI, AI Agents & Agent Governance News – 29 October 2026

Image
🤖 Top Agentic AI, AI Agents & Governance Articles Your twice-weekly roundup of the latest in Agentic AI , AI agents , and agent access, permission, governance & audit — covering agent frameworks, MCP/tool-use, agent identity, non-human access control, AI governance and agent security. OpenAI and ServiceNow expand partnership across enterprise workflows Source : OpenAI News OpenAI and ServiceNow expand their partnership to bring OpenAI models and agents into ServiceNow and ServiceNow workflows into ChatGPT and Codex. Legora is building the agentic operating system for legal work Source : OpenAI News See how Legora uses OpenAI models, ChatGPT, and Codex to accelerate legal workflows, expand contract analysis, and free lawyers to focus on higher-value work. Retell uses OpenAI models to help power 100M monthly calls ...
Read more

An Agent Audit Trail Should Read Like a Timeline

Image
A final message saying “task completed” is not an audit trail. It tells you what the agent wants you to believe happened. It doesn’t show which identity acted, what authority it had, which policy was applied, or why a tool call was allowed. That distinction matters when the result looks correct. Reconstruct the decision, not just the outcome An agent rarely performs one action. It interprets a request, selects an identity, checks available authority, chooses tools, applies policy, and produces an outcome. If the record stores only the final response, the important evidence is already gone. A useful audit trail should let an engineer or reviewer answer: What request started the run? Which agent identity handled it? What authority was delegated? Which policies were evaluated? Which tools did the agent consider and call? Where did an approval happen, or fail to happen? What did each action return? How did the run end? This is a timeline, not a transcript dump. The differ...
Read more

A Valid Agent Plan Can Become an Invalid Action

Image
An agent can start with permission to draft a production change and still have no permission to deploy it. That sounds obvious. In practice, many authorization designs treat the agent’s initial task as the security boundary. Once approved, the agent is free to discover data, call tools, and adjust its plan. That’s where control weakens. A runtime decision should follow the action, not just the task description. Consider an agent asked to prepare a production configuration change. At the start, the request may look safe: The user is identified. The agent is assigned a drafting task. The target system is known. The expected output is a proposed change. The agent reads configuration data, checks deployment status, discovers that the change affects a wider set of services, and produces a deployment command. The agent’s plan has changed. The final action is no longer “draft a change.” It’s “apply a change to production.” That should be a new authorization decision. The policy...
Read more

Authorization Is a Runtime Decision, Not a One-Time Permission

Image
An AI agent shouldn’t receive permanent permission just because its initial task looked safe. Plans Change During Execution Agents rarely follow a fixed path. They retrieve new information, select tools, update their plan, and decide what to do next. Each step can change the risk of the action that follows. A request to “prepare a production change” might begin as a low-risk drafting task. It becomes materially different when the agent discovers a live system, accesses sensitive data, or proposes an action that affects production. That change deserves a new policy decision. Evaluate the Full Context A useful authorization decision needs more than the requested action. Evaluate: The agent making the request The user behind the agent The tool being called The resource being accessed The current task and execution context The action's potential effect The same agent may be allowed to read a configuration file but blocked from changing it. The same user may be permitte...
Read more