Governance Is the Accelerator: Josh Woodruff (CSA) on Getting Agents Out of Pilot Purgatory "Zero Trust taught us to check who you are and what you can reach on every request. But agents need one more check on top of that. What are you doing right now?" Josh Woodruff, Co-Chair of the Zero Trust Working Group at @cloudsa, Founder and CEO of Massive Scale AI, and creator of the Agentic Trust Framework, joined us to explain why treating every AI agent like a new hire that earns its autonomy is what lets the business move faster with agents. We get into: > The five questions you have to answer about every agent, and the intern to principal autonomy ladder > Why agents running under a human's identity turn every kill switch into a work stoppage > Why intent is a useful signal > Why many smaller scoped agents is better than one monolithic one TIMESTAMPS (00:38) Helping leaders say yes to agents and keep the power to stop them (01:29) The book, the Agentic Trust Framework, and donating it to CSA (04:01) ATF and Agent Baseline land in the same place (05:12) Why every agent needs its own identity and behavioral baseline (09:07) Inventory, access reviews, and the 20-year-old shared service account (14:35) Human sponsors, tool scopes, and the roster as a forcing function (19:36) Intent-based auth, AAuth missions, and the deleted inbox (21:44) The Resy ban and the $1.4 million floor cleaner order (24:59) ATF and AARM: earned autonomy meets runtime action control (30:48) Fine-grained kill switches and microagents (32:45) Tokenomics and why constraints are rocket fuel (39:52) Reversibility and the never list (43:11) Secure action, not just access, and the Stop Rogue AI bill

The Software Factory Reference Architecture is live at agentbaseline.org @AhmadNassri, Aaron Stanley, @ealeyner, @ianlivingstone, and more applied Agent Baseline's 6 outcomes to the factory: Discover. Constrain. Authorize. Validate. Observe. Respond.

"That ability to immediately revoke an agent's access or kill its ability to perform an action is fundamental." - @ianlivingstone CEO @KeycardAI Tomorrow: the Software Factory Reference Architecture drops, built on 6 Agent Baseline outcomes including Respond.

"As far as the agent or the package manager is concerned, those versions don't exist." - @AhmadNassri CTO @SocketSecurity What an agent can't see, it can't reach for. That's in the Software Factory Reference Architecture, out Tuesday from Ahmad, @ealeyner, and more.

"We need to start looking at cybersecurity about the actions, not just the permissions or what I am entitled to do, but actually what is the action that it's done." - Michael Davis @jpmorgan These ideas are in the new Software Factory Reference Architecture, dropping Tuesday 👀

"If it starts getting stuck, then it will do what I call thrash. It just starts to get creative about ways to solve the problem, and that is very unpredictable." - @travismcpeak @cursor_ai We learned thrash from Travis. Next week's reference architecture release defines it.

"Some folks tried to skip A through D and go straight to F. That's where vibe coding fell over really quickly" @thatsjet Distinguished Engineer @GEICO Teams that skip design and go straight to prompting get less secure software. Next week Jet and others publish a software factory reference architecture with this in mind.

"You can argue that a developer working in your organization has morals. It is very difficult to argue that an agent does." - @ealeyner VP Product Strategy @Docker Constrain is 1 of 6 Agent Baseline outcomes, and Eli's applying it to something bigger. Out soon 👀