Alan L. Paris

Baseline agent controls are diffusing fast enough that having them no longer distinguishes anyone. Separately, AI adoption is introducing usage-sensitive cost into a subscription business. Neither shift decides who wins. Together they move the scarce layer somewhere a vendor cannot sell it. Executive Summary In July I argued that the control plane is where the AI governance category is concentrating, and that whoever sits between instruction and action holds the evidence, the revocation path,...

For two years the argument about AI agent identity has been a security team argument. It lived in access reviews and credential rotation schedules, and it lost most of its budget fights to whatever was on fire that quarter. That argument just picked up an unlikely ally. On August 17 the White House released the National Security Science and Technology Strategy. It came from the Office of Science and Technology Policy, it sets federal research and acquisition priorities, and it has nothing to...

Models generate. Agents act. Governance must follow the action. By 2027, Gartner expects 40 percent of enterprises to demote or decommission autonomous AI agents. Not because the agents stopped working. Because of governance gaps that surfaced only after a production incident. The analyst behind the forecast, Shiva Varma, put the cause plainly. Enterprises treat agent governance as a binary, either locked down or fully trusted, and that is the root of the failure. That number deserves a...