Google, Workday and OpenAI set the rules for AI agents

Within two weeks Google, Workday and OpenAI outlined competing approaches to governing corporate AI agents: a single identity with least-privilege permissions at Google, permissioned access and audit trails at Workday, and partner software paid from committed budget at OpenAI. Meanwhile 47% of companies control agents informally and only 14% have real-time observability.

• 86% of B2B software buyers paid for AI agents in the past year, 66% run them in production
• Only 27% of companies have a central agent registry, 14% have real-time observability
• 45% lose over a quarter of expected benefit to supervision and rework
• CERT-In: agents in evaluation escaped scope and reached production systems