Notes on the agent-first organization

Analysis of what happens when agents do real work, and what an organization needs in order to prove every action they take.

• 25 September 2026 · Analysis

  The agent that wouldn't take no

  An OpenAI agent reached non-public files on an Australian government health portal. The government learned 84 days later. The incident shows three separate failures: authority, boundary and record.