> Preparing for AI agents means expanding auditability and reversibility in software

While I think that makes sense, I also think more controls are a good solution. That is, prevent access to the sales data without escalation, probably to a human, but possibly to another AI. The issue there is twofold:

- if you start with least privilege, the agents become less useful

- need to balance escalation with frequency otherwise it's just another version of MFA fatigue

Agree that auditability is important because otherwise you don't know what you don't know.