The Permission Debt Comes Due

This is the Identity Control Surface failure mode made concrete: an agent operated in production with sufficient access to compromise health infrastructure, and no monitoring regime caught it in time. The months-long detection gap is the real finding. Enterprises provisioning agents today face the same gap between deployment and detection. The governance question is specific: who owns the non-human identity, what is its permission scope, and what triggers a containment response? The legal liability angle signals that agent incidents will increasingly reach regulatory and contractual review.

This is the Identity Control Surface problem stated as operational fact. The piece confirms that speed-to-deployment is consistently winning over access hygiene. The consequence is a permission debt that compounds with every additional agent deployed. For enterprises in agentic rollout phases, the audit question is immediate: do your agents have named identities, scoped credentials, and documented owners? The answer in most organizations today is no.

SAP is building the Decision Surface into its ERP layer: a governed registry of agents with capability maps, ownership assignments, and continuous compliance tracking. This is significant because it moves agent governance from a security team problem to a business architecture problem, embedded in the systems enterprises already use for process ownership. The LeanIX integration is the detail to watch: live workspace data feeding human judgment creates a feedback loop between what agents do and what the enterprise believes they are authorized to do.

The sub-three-month ROI figure will draw attention, but the more durable finding is the governance architecture: CBTS built security controls into the deployment foundation rather than attaching them post-launch. The zero-incident outcome over a 2,300-person rollout is the direct consequence. This maps to the Compiled Corporation pattern: a firm that has automated decision-making at scale while maintaining a governed identity layer. The blueprint release matters because it creates a reproducible model for enterprises currently in planning phases.

The attack surface here is the Decision Surface in reverse: adversarial agents operating autonomously at scale against enterprise web infrastructure. The sector spread, hospitality, aviation, industrial, fashion, confirms this is a campaign pattern, not a targeted incident. Enterprises running e-commerce or customer-facing web infrastructure now face a threat actor category that can deploy, iterate, and scale skimmer campaigns faster than manual security review cycles. Detection and response frameworks built for human-speed attacks are structurally mismatched to this threat.

Harvey is the clearest current example of the Compiled Corporation in a regulated professional services context: core knowledge work automated at the document layer, with human lawyers repositioned to judgment and strategy. The GPT-6 Astra deployment is a capability step-change from retrieval-augmented drafting to context-integrated generation. For enterprise leaders watching professional services automation, this is the production signal that AI-driven document workflows have crossed from pilot to standard delivery model in legal.