← The Vault
At Work

Why companies struggle to control their AI workers

As companies launch more AI agents to handle tasks, they are discovering that individual bots are easy to build but impossible to manage. When dozens of agents start talking to each other and accessing sensitive databases without human oversight, the system becomes a tangled web of security risks. Experts argue the solution is not to slow down, but to move guardrails directly into the databases where agents do their work.

Edition № 475Room: At Work27 August 20262 min readSources: 3
Article

Companies are rushing to add AI assistants to every part of their business, but they are hitting a wall. They treat each new AI agent like a separate, simple project, failing to see that when these bots start working together, they create a complex, unpredictable web that can quickly spin out of control.

WHAT'S HAPPENING

Businesses are deploying fleets of AI agents—independent programs designed to perform specific tasks like answering customer support queries or updating account details. The problem is that these agents are often bolted onto older, clunky software systems. When one agent starts calling another, which then triggers a third, the complexity compounds. A simple support request might pass through four different agents before a human ever sees it. Because nobody is mapping these connections, companies often lose track of which agent has permission to access which files, leading to security holes and management chaos.

The danger of the invisible chain

HOW IT WORKS

Think of an AI agent as a highly capable but literal-minded worker. To get anything done, it needs to interact with the company's internal software—such as the customer database or the payment system. To do this, the agent uses an API, which is essentially a standardized request form that lets the software know what data to hand over. Because the software is designed to respond to these forms automatically, it will fulfill any request an agent makes as long as the agent has the "credentials" to use the form.

The security danger arises when an agent is given broad access to these request forms. If you give an AI permission to use the form that reaches the payment system, it can technically pull financial data anytime it wants. As agents begin talking to each other, Agent A might ask Agent B for data, and Agent B uses its own credentials to pull that data from a sensitive system. You end up with a chain reaction where the original intent is lost, and the system is blindly fulfilling requests that no human ever personally reviewed.

WHY IT MATTERS

The temptation is to treat this as a reason to slow down, but experts argue that effective management actually allows companies to move faster. The goal is to move governance—the rules of the road—directly into the database layer. Instead of hoping an AI follows instructions, the system physically blocks it from accessing data it shouldn't touch. By forcing agents to pass through these digital gates every time they request information, companies can maintain control. The future isn't about human-led, step-by-step approval for every task; it is about building a system where the rules are baked into the plumbing, so the business can scale its AI fleet safely.

Sources
← PreviousA new $399 robot duck is teaching AI to move in the real worldNext →Why the AI boom is running into a real-world wall
Tomorrow's edition · free

Liked this one? The next lands at breakfast.

Every story in tomorrow's AI news, rebuilt in plain English — five minutes, sources linked, free forever.

By joining you agree to receive Article's daily newsletter — unsubscribe in one click. Privacy

← Back to the Vault