Notes

Check. Person. Record.

Short reads. No customer names. The gap is what happens at runtime, before the agent acts.

• Note · 2026-08

  You can have a program and still have a loose agent.

  A policy PDF shows that a program exists. The useful question is simpler: if this agent tries something it should not, does anything actually stop it?

• Note · 2026-08

  Who says the agent is allowed to do this?

  A model can guess. A payment or a credit decision cannot. Someone has to decide before the real system is touched.

• Note · 2026-08

  Agents are leaving the lab. The check has to run first.

  A slide deck is not proof that you can stop a high-impact step. Security and Risk want a check that runs before the system is touched.