Today's signals converge on a single fault line: the interface is getting frictionless while the governance underneath it is falling behind.
Start with the two data points that matter most. Darktrace reports the typical enterprise now runs 7 simultaneous AI provider services against 16 million-plus connections, growing 13% in a single half. Meanwhile Microsoft collapsed AutoGen and Semantic Kernel into a GA-stable Agent Framework 1.0 with A2A and MCP interoperability baked in. Read those together. Microsoft just removed the fragmentation excuse that let enterprises defer agent infrastructure — and in the same stroke turned every agent-to-agent handoff into a governed identity event. The Identity Control Surface is expanding faster than any enumeration program can track it.
That is the strategic argument this week: connectivity is scaling faster than control, and the vendors are the ones setting the pace. Our index shows Agent-Ready Infrastructure at 52 (+1) — a floor, not a ceiling. A single-point move does not close a gap that is compounding at double digits per half.
The interface signals make this worse before they make it better. OpenAI's GPT-Live removes turn-taking — the most visible seam in the human/agent interface. When query-response starts feeling like conversation, users stop interrogating and start trusting. Pair that with the MIT finding that non-experts defer to LLM output regardless of accuracy while experts catch errors, and you have the highest-risk combination in enterprise deployment: low-friction interfaces meeting low-expertise populations. That is not decision support. It is decision displacement, and the organization absorbs the liability.
The counterweight is real, which is why this is not a reason to slow down. Circles posted a 22% ARPU increase and 9% churn reduction in production telco — two opposing forces moved simultaneously, which only happens when the AI is optimizing a coherent customer model rather than gaming a metric. The Compiled Corporation is being built right now, and it prints P&L. The lesson is not to wait. It is to build the identity registry before you build the seventh provider integration, not after.
So the discipline for principals this week: treat the EU AI Act governance posture as an active procurement checklist — verify that contractual control evidence matches what providers publish — and audit whether your deployed interface architecture supports the augmentation story your brand tells. The gap between the two is where both regulatory and reputational exposure lives.
Watch this: the first CIEM vendor to ship native AI agent entitlement mapping as a shipped product feature — not a roadmap slide. That announcement marks the moment the Identity Control Surface stops being a strategic concern and becomes an operational procurement decision. Whoever ships it first sets the enumeration standard everyone else buys against.
WatchNon-human identity enumeration gap: The Darktrace 7-provider / 16M-connection data, the Microsoft Agent Framework 1.0 A2A interoperability layer, and the Claude Agent SDK sub-agent release all point to the same structural problem arriving simultaneously — enterprises cannot govern identity surfaces they cannot enumerate. No major enterprise identity provider has yet published a production-grade agent identity registry standard. Watch for the first CIEM (Cloud Infrastructure Entitlement Management) vendor to ship native AI agent entitlement mapping as a product feature, not a roadmap item. That announcement will mark the moment the Identity Control Surface problem transitions from strategic concern to operational procurement decision.