The agent count is about to outrun the control plane

This is a Decision Surface and Identity Control Surface signal. The triple-platform pattern means agent identity, permissions, and spending authority are distributed across competing runtime environments with no unified control plane. The 20% gap in real-time spend controls is not a tooling shortfall; it is a governance architecture failure. Organizations building agent programs now need a control surface answer before scale makes the gap structural.

This case is the Compiled Corporation problem in concrete form. The firm automated a workflow surface without building the underlying decision architecture, audit infrastructure, or adaptive runtime that production agents require. The 40% manual intervention rate signals a Decision Surface that reverted to human fallback by operational necessity. For any organization treating pilot accuracy as a production readiness signal, this is the corrective data point.

The 10,000x agent count increase projected by 2028 makes the Identity Control Surface the most consequential governance design decision organizations face now. Each agent carries credentials, permissions, and action authority equivalent to a human account. Treating agents as high-risk workloads with human-equivalent attack surfaces is the correct architectural framing, and the window to build that posture before scale closes is narrow.

The Identity Control Surface risk here is concrete: agent skills are executable identities with access to system resources. Malicious skill injection is the agent-era equivalent of credential compromise, but it operates at a layer most enterprise security stacks do not yet monitor. The IBM-OpenAI partnership formalizes a detection pattern organizations should evaluate against their own agent skill governance, independent of vendor choice.

SAP is the Compiled Corporation benchmark for enterprise ERP customers. Two hundred deployed agents across five domains is an execution signal, not a roadmap item. For organizations running SAP infrastructure, the relevant question is how SAP's agent layer interacts with their own Decision Surfaces and whether the Autonomous Enterprise framing aligns with the governance controls they have built. The Janus Brands dimension applies: SAP's legacy brand is process reliability; the autonomous framing is a material identity shift that customers should evaluate with care.

The attribution question is an Identity Control Surface problem at the institutional level. If an agent is the named discoverer, the identity governance questions are: who owns the output, who bears liability for errors, and how does the organization's legal personhood relate to the agent's claimed authorship. Enterprise legal and compliance teams that have not mapped agent output attribution are already exposed to this ambiguity, regardless of sector.