The decision at the center
Which permissions are justified by the agent's job, and who is accountable when it acts?
The conversation
The session looks past the chat interface to the identities, tools, and downstream permissions that create real exposure. It gives leaders a practical way to ask for evidence without turning the discussion into a product checklist.
What to consider
- Map the requesting person, executing identity, and approving authority.
- Spot excessive permissions and unclear ownership.
- Test an end-to-end action boundary with synthetic data.
- Prepare a usable revocation and exception-handling process.
How to use this guide
Use these questions for a reading group, team discussion, or event-planning conversation. Choose examples that fit the audience and avoid sharing confidential information. This guide describes a topic, not a program offered by a particular speaker.
Questions to explore
- What kinds of agents are deployed or planned?
- Which systems can they read or change?
- Who owns identity and approval decisions across those systems?
Read before the conversation
Your AI Agents Have Keys to Everything. Nobody's Watching the Doors.
A connected agent needs an accountable owner and a bounded identity. Start with what it can reach, then test what it is allowed to do.