{"id":745411,"date":"2026-08-29T01:40:24","date_gmt":"2026-08-28T22:40:24","guid":{"rendered":"https:\/\/buradabiliyorum.com\/en\/why-businesses-need-clearer-limits-before-ai-agents-are-authorized-to-act\/"},"modified":"2026-08-29T01:40:24","modified_gmt":"2026-08-28T22:40:24","slug":"why-businesses-need-clearer-limits-before-ai-agents-are-authorized-to-act","status":"publish","type":"post","link":"https:\/\/buradabiliyorum.com\/en\/why-businesses-need-clearer-limits-before-ai-agents-are-authorized-to-act\/","title":{"rendered":"Why businesses need clearer limits before AI agents are authorized to act"},"content":{"rendered":"<div id=\"ez-toc-container\" class=\"ez-toc-v2_0_89 counter-hierarchy ez-toc-counter ez-toc-custom ez-toc-container-direction\">\n<p class=\"ez-toc-title\" style=\"cursor:inherit\">Table of Contents<\/p>\n<label for=\"ez-toc-cssicon-toggle-item-6af596d4bcb59\" class=\"ez-toc-cssicon-toggle-label\"><span class=\"\"><span class=\"eztoc-hide\" style=\"display:none;\">Toggle<\/span><span class=\"ez-toc-icon-toggle-span\"><svg style=\"fill: #dd3333;color:#dd3333\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" class=\"list-377408\" width=\"20px\" height=\"20px\" viewBox=\"0 0 24 24\" fill=\"none\"><path d=\"M6 6H4v2h2V6zm14 0H8v2h12V6zM4 11h2v2H4v-2zm16 0H8v2h12v-2zM4 16h2v2H4v-2zm16 0H8v2h12v-2z\" fill=\"currentColor\"><\/path><\/svg><svg style=\"fill: #dd3333;color:#dd3333\" class=\"arrow-unsorted-368013\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"10px\" height=\"10px\" viewBox=\"0 0 24 24\" version=\"1.2\" baseProfile=\"tiny\"><path d=\"M18.2 9.3l-6.2-6.3-6.2 6.3c-.2.2-.3.4-.3.7s.1.5.3.7c.2.2.4.3.7.3h11c.3 0 .5-.1.7-.3.2-.2.3-.5.3-.7s-.1-.5-.3-.7zM5.8 14.7l6.2 6.3 6.2-6.3c.2-.2.3-.5.3-.7s-.1-.5-.3-.7c-.2-.2-.4-.3-.7-.3h-11c-.3 0-.5.1-.7.3-.2.2-.3.5-.3.7s.1.5.3.7z\"\/><\/svg><\/span><\/span><\/label><input type=\"checkbox\"  id=\"ez-toc-cssicon-toggle-item-6af596d4bcb59\" checked aria-label=\"Toggle\" \/><nav><ul class='ez-toc-list ez-toc-list-level-1 ' ><li class='ez-toc-page-1 ez-toc-heading-level-4'><a class=\"ez-toc-link ez-toc-heading-1\" href=\"https:\/\/buradabiliyorum.com\/en\/why-businesses-need-clearer-limits-before-ai-agents-are-authorized-to-act\/#TLDR\" >TL;DR<\/a><\/li><\/ul><\/nav><\/div>\n<p><img decoding=\"async\" src=\"https:\/\/media.thenextweb.com\/2026\/08\/georgia-power-demolishing-homes-ai-data-centres-zuckerberg-agents.avif\" \/><\/p>\n<div id=\"article-main-content\">\n<div class=\"postContent-tldr\">\n<h4 class=\"postContent-offsetTitle\"><span class=\"ez-toc-section\" id=\"TLDR\"><\/span>TL;DR<span class=\"ez-toc-section-end\"><\/span><\/h4>\n<p><em>An IBM survey of 2,000 C-level executives found only 11% feel fully prepared for AI agent deployment. PromptHalo founder Madhuri Chandoor argues the core issue is distinguishing capability from authority. Her refund-splitting example shows how agents can circumvent per-action limits through sequential requests. She advocates behavioral profiling for AI agents (modeled on financial fraud monitoring) and documenting what agents can access, under what conditions, and what downstream effects are possible.<\/em><\/p>\n<\/div>\n<p>A 2026 <a rel=\"nofollow\" target=\"_blank\" href=\"https:\/\/newsroom.ibm.com\/2026-06-08-new-ibm-study-finds-cios-and-ctos-face-growing-ai-control-gap-as-enterprise-deployment-scales\" target=\"_blank\" rel=\"nofollow noopener\">IBM<\/a> study points to questions about AI readiness, visibility, and control. The survey of 2,000 C-level <a href=\"https:\/\/buradabiliyorum.com\/en\/category\/technology\/\" data-internallinksmanager029f6b8e52c=\"4\" title=\"Technology\" target=\"_blank\" rel=\"noopener\">technology<\/a> executives found 11% felt fully prepared for the AI-agent deployment expected over the following year. Two-thirds of CIOs and CTOs said they were accountable for AI systems they did not fully control, while 70% said teams were deploying technology faster than IT could track. IBM presented the findings as an indication of a growing control gap as AI use expands across businesses.<\/p>\n<p>The distinction between capability and authority is central to how <a rel=\"nofollow\" target=\"_blank\" href=\"https:\/\/www.linkedin.com\/in\/madhuri-chandoor?trk=public_post_feed-actor-name&amp;original_referer=https%3A%2F%2Fwww.linkedin.com%2Fposts%2Fmadhuri-chandoor_prompthalo-linkedin-activity-7419821726726905856-4SLJ\" target=\"_blank\" rel=\"nofollow noopener\">Madhuri Chandoor,<\/a> founder of <a rel=\"nofollow\" target=\"_blank\" href=\"https:\/\/www.prompthalo.ai\/\" target=\"_blank\" rel=\"nofollow noopener\">PromptHalo<\/a>, <a href=\"https:\/\/buradabiliyorum.com\/en\/category\/download-scripts-themes-apps\/\" data-internallinksmanager029f6b8e52c=\"9\" title=\"Download Scripts &amp; Themes &amp; Apps\" target=\"_blank\" rel=\"noopener\">app<\/a>roaches that control gap. She describes PromptHalo as an AI security and trust infrastructure company that inspects why a certain action is being performed, rather than just inspecting what is being performed. According to Chandoor, the approach is intended to give organizations more contextual information about whether an action reflects user intent, assigned permissions, and the surrounding circumstances before a system proceeds.<\/p>\n<p>One hypothetical enterprise database task illustrates the concern Chandoor raises about context. She says that an infrastructure-managing AI agent asked to improve application performance might add or remove an index or change the table structures autonomously in a production environment. In her example, that action could affect live transactions, customer data, or dependent processes that were outside the agent\u2019s im<a href=\"https:\/\/buradabiliyorum.com\/en\/category\/social-mediaa\/\" data-internallinksmanager029f6b8e52c=\"1\" title=\"Social Media\" target=\"_blank\" rel=\"noopener\">media<\/a>te analysis. \u201c<em>A technical conclusion can appear reasonable within a narrow focus,<\/em>\u201d Chandoor says. \u201c<em>The context, the situation, and the downstream impact still need to be considered before an action proceeds.<\/em>\u201d<\/p>\n<p>Earlier chatbots, in Chandoor\u2019s account, <a href=\"https:\/\/buradabiliyorum.com\/en\/category\/general\/\" data-internallinksmanager029f6b8e52c=\"3\" title=\"General\" target=\"_blank\" rel=\"noopener\">general<\/a>ly operated within predetermined questions and answers. She says with large language models we are now using broader company information and tools that increase the exposed risk surface, leading businesses to consider how incoming requests could influence a system. She recommends that security teams examine how a request is interpreted and what level of authority connected systems provide before an agent proceeds.<\/p>\n<p>Chandoor uses a refund scenario to explain why context may span several actions. In her example, an agent may issue refunds up to $50 without human review. A user then requests ten $50 refunds rather than one $500 refund requiring review. Chandoor says each transaction could appear permissible when examined individually, while the sequence may suggest an effort to avoid the threshold. From her perspective, reviewing broader session context and behavior could help identify when escalation for human review may be appropriate.<\/p>\n<p>Drawing on two decades in financial services, Chandoor compares her approach with fraud monitoring across transactions and accounts. She suggests organizations develop behavioral profiles for autonomous agents alongside the identity and access permissions. Under her proposed model, teams would review the resources an agent accesses, its use of tools, changes in its activity over time, and actions that appear inconsistent with its assigned role or the circumstances of a session.<\/p>\n<p>Questions about authorization should be considered during both design and operation, Chandoor says. In her view, teams benefit from documenting the resources an agent may access, the conditions that apply to that access, and the possible downstream effects of particular actions. She also recommends observability gates to review activity, particularly to inspect and address when requests become repeated, unusually broad, or inconsistent with the purpose originally assigned to the agent. Those checkpoints, Chandoor explains, can help contain the impact and determine what additional controls are required to secure underlying systems.<\/p>\n<p>Chandoor emphasises her position as support for responsible AI adoption. She favors using agentic automation for analysis and workflows but applying additional verification when the impact involves critical decisions and actions. \u201c<em>Trust, but verify,<\/em>\u201d she says.<\/p>\n<p>\u201c<em>Businesses should adopt AI responsibly and verify its behavior throughout the process,<\/em>\u201d she says. \u201c<em>Establishing clear accountability ownership across the organizations for AI applications security is essential to operationalise these guardrails.<\/em>\u201d In <a rel=\"nofollow\" target=\"_blank\" href=\"https:\/\/www.prompthalo.ai\/feeds\" target=\"_blank\" rel=\"nofollow noopener\">her view<\/a>, that approach may help businesses pursue AI innovation while giving security and accountability the necessary attention.<\/p>\n<\/p><\/div>\n<blockquote><p><strong><span style=\"color: #ff6600;\">If you liked the article, do not forget to share it with your friends. Follow us on\u00a0<span style=\"color: #ff0000;\"><a style=\"color: #ff0000;\" href=\"https:\/\/news.google.com\/publications\/CAAqBwgKMN63nwsw68G3Aw\" target=\"_blank\" rel=\"nofollow noopener noreferrer\">Google News<\/a><\/span>\u00a0too, click on the star and choose us from your favorites.<\/span><\/strong><\/p><\/blockquote>\n<blockquote>\n<p style=\"text-align: center;\"><strong>If you want to read more like this article, you can visit our <span style=\"color: #ff9900;\"><a style=\"color: #ff9900;\" href=\"https:\/\/buradabiliyorum.com\/en\/category\/technology\/\" target=\"_blank\" >Technology category.<\/a><\/span><\/strong><\/p>\n<\/blockquote>\n<p><span style=\"color: black;\"><a style=\"color: #ff9900;\" href=\"https:\/\/thenextweb.com\/news\/ai-agents-clearer-limits-authorization\" target=\"_blank\" >Source<\/a><\/span><\/p>\n","protected":false},"excerpt":{"rendered":"<p>TL;DR An IBM survey of 2,000 C-level executives found only 11% feel fully prepared for AI agent deployment. PromptHalo founder Madhuri Chandoor argues the core issue is distinguishing capability from authority. Her refund-splitting example shows how agents can circumvent per-action limits through sequential requests. She advocates behavioral profiling for AI agents (modeled on financial fraud&#8230;<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"fifu_image_url":"","fifu_image_alt":"","footnotes":""},"categories":[18],"tags":[],"class_list":["post-745411","post","type-post","status-publish","format-standard","hentry","category-technology"],"_links":{"self":[{"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/posts\/745411","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/comments?post=745411"}],"version-history":[{"count":0,"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/posts\/745411\/revisions"}],"wp:attachment":[{"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/media?parent=745411"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/categories?post=745411"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/tags?post=745411"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}