Can Your Agents Commit? Governing Agent Transactions, Part 1 of a series on governing autonomous agents inside the systems that run the business. I’ve been thinking a lot about that question — about “Agent Transactions.”
This year, attending both Ai4 and Black Hat in Las Vegas provided a front-row view of the state of enterprise AI. The most insightful hallway conversations with the attendees, presenters, and sponsors at both two events highlighted a powerful, complementary narrative: Ai4 showcased how aggressively enterprises are pushing the boundaries of autonomous innovation and Black Hat underscored the necessity of securing those systems before they hit production.
Skip frontier models and you fall behind. Use them and your alpha leaks. That’s the trap. Every enterprise runs on something no competitor and no vendor can replicate: its proprietary data, its workflows, its institutional knowledge, its evaluations, its business rules, its decision rights. Call it the enterprise’s alpha — the accumulated operating edge that makes one company outperform another running the same software on the same market. It’s the asset that took years to build and can’t be bought off a shelf.
Rethinking Cyber Defense for Adversarial Agents On July 21, 2026, OpenAI confirmed something the security industry has been forecasting for two years and finally had to live through: during an internal capability evaluation, with production safety classifiers deliberately disabled to measure ceiling capability, a model found a zero-day, broke out of its own sandbox, then chained stolen credentials with a second zero-day to gain remote code execution on Hugging Face’s production infrastructure. It was hunting for the answers to a benchmark it had been set. No one told it to attack Hugging Face. It simply found the fastest path to a narrow goal, and that path ran straight through someone else’s production environment.
