{
  "schema": "hangingcontext.desk/1",
  "type": "story",
  "id": "178",
  "slug": "enterprise-agent-governance-stack",
  "edition": "2026-10-17T12",
  "url": "https://hangingcontext.com/stories/2026-10-17/enterprise-agent-governance-stack/",
  "newsroom": "artificial-intelligence",
  "beat": "developers",
  "newsroom_title": "Artificial Intelligence",
  "angle": "Governance is the enterprise agent product now: an analyst crown, a runtime control plane, and the shadow AI problem",
  "headline": "Oracle tops the agentic AI analyst chart as CrewAI ships a runtime control plane and shadow AI goes mainstream",
  "dek": "Three vendors, one convergence: enterprise AI's differentiator this week is who governs agents — and where the enforcement lives.",
  "published_at": "2026-10-17T12:21:12Z",
  "labels": {
    "trust": "confirmed",
    "trust_text": "Confirmed · 3 sources",
    "newsroom": "Artificial Intelligence"
  },
  "source_count": 3,
  "publishers": [
    "crewai-blog",
    "dataiku-blog",
    "oracle-blog"
  ],
  "key_facts": [
    {
      "text": "Oracle was named a Leader in the IDC MarketScape: Worldwide Agentic AI Platforms 2026 Vendor Assessment.",
      "self_reported": true,
      "cites": [
        {
          "manifest_id": "1792190119590028468",
          "claim_ids": [
            "1792190442333851333"
          ]
        }
      ]
    },
    {
      "text": "Oracle's OCI Enterprise AI integrates model access, agent development, orchestration, and governance into one managed service, supporting MCP and Agent2Agent protocols.",
      "self_reported": true,
      "cites": [
        {
          "manifest_id": "1792190119590028468",
          "claim_ids": [
            "1792190442335698183",
            "1792190442337647678",
            "1792190442338346852"
          ]
        }
      ]
    },
    {
      "text": "CrewAI launched the Agent Control Plane on its AMP platform: centralized runtime governance with 13 out-of-the-box policies, explicitly not a replacement for identity layers or systems of record.",
      "self_reported": true,
      "cites": [
        {
          "manifest_id": "1792176784624096509",
          "claim_ids": [
            "1792177209397658718",
            "1792177209412928207",
            "1792177209459111687"
          ]
        }
      ]
    },
    {
      "text": "71% of UK employees used unapproved consumer AI tools at work in October 2025, and one in five organizations reported a security breach tied to shadow AI in 2025, according to figures cited by Dataiku.",
      "self_reported": true,
      "cites": [
        {
          "manifest_id": "1792173604022567162",
          "claim_ids": [
            "1792173867080844958",
            "1792173867084755581"
          ]
        }
      ]
    },
    {
      "text": "Analysts bypass approved platforms because those tools are too rigid or take too long to access — Dataiku's argument for making the governed path the fast path instead of adding stricter controls.",
      "self_reported": true,
      "cites": [
        {
          "manifest_id": "1792173604022567162",
          "claim_ids": [
            "1792173867085707478"
          ]
        }
      ]
    }
  ],
  "images": [],
  "sections": [
    {
      "heading": "The analyst verdict",
      "paragraphs": [
        {
          "markdown": "Oracle opened the week with the credential enterprise buyers notice first: a Leader placement in the IDC MarketScape: Worldwide Agentic AI Platforms 2026 Vendor Assessment. The positioning is deliberate — Oracle's OCI Enterprise AI is framed as a unified platform that folds model access, agent development, orchestration, and governance into one managed service, with support for both Model Context Protocol and Agent2Agent so agents can connect to tools and to each other. The message to procurement teams is that governance arrives bundled, not bolted on.",
          "cites": [
            {
              "manifest_id": "1792190119590028468",
              "claim_ids": [
                "1792190442333851333",
                "1792190442335698183",
                "1792190442337647678",
                "1792190442338346852"
              ]
            }
          ]
        },
        {
          "markdown": "Oracle's cited customer proof point is ARENCO Group, which the company says used OCI Enterprise AI to automate document checks — one concrete workload, not a transformation narrative. And the company stresses model flexibility: enterprises keep choice over models while Oracle holds the security and operational controls. It is a company telling its own story, so read the Leader placement as a vendor's best case, not a buyer's conclusion.",
          "cites": [
            {
              "manifest_id": "1792190119590028468",
              "claim_ids": [
                "1792190442340391099"
              ]
            }
          ]
        }
      ]
    },
    {
      "heading": "The runtime answer",
      "paragraphs": [
        {
          "markdown": "CrewAI took the opposite tack from the analyst chart: build the control plane inside the runtime. Its Agent Control Plane, launched on the CrewAI AMP platform, governs agents built in its low-code Crew Studio and agents written in Python with CrewAI open source — one enforcement surface across both. The idea is to put policies such as PII masking, cost limits, and tool restrictions directly into the execution loop, since external HTTP proxies cannot inspect an agent's internal state transitions.",
          "cites": [
            {
              "manifest_id": "1792176784624096509",
              "claim_ids": [
                "1792177209397658718",
                "1792177209399673848",
                "1792177209499252210"
              ]
            }
          ]
        },
        {
          "markdown": "The honest part of the announcement is the scope note: CrewAI says the Agent Control Plane does not replace identity layers or systems of record, and it ships with 13 out-of-the-box policies for platform administrators. That is the right boundary to state — a runtime policy engine is not an IAM system — but it also marks what buyers still have to assemble themselves. Governance inside the loop is a real product advance; it is not the whole compliance answer.",
          "cites": [
            {
              "manifest_id": "1792176784624096509",
              "claim_ids": [
                "1792177209412928207",
                "1792177209459111687"
              ]
            }
          ]
        }
      ]
    },
    {
      "heading": "The problem both are chasing",
      "paragraphs": [
        {
          "markdown": "Dataiku's argument this week explains why both announcements exist. Shadow AI — any AI tool, model, or agent used at work without IT's knowledge or sign-off — is already inside the building. Dataiku cites figures that make the point sharply: 71% of UK employees reported using unapproved consumer AI tools at work in October 2025, and one in five organizations reported a security breach tied to shadow AI in 2025. The numbers are cited by a vendor selling the answer, so treat them as directional rather than definitive.",
          "cites": [
            {
              "manifest_id": "1792173604022567162",
              "claim_ids": [
                "1792173867077748529",
                "1792173867080844958",
                "1792173867084755581"
              ]
            }
          ]
        },
        {
          "markdown": "The diagnosis is the interesting part: analysts bypass official platforms because approved tools are too rigid or take too long to access. Dataiku's prescription follows from that — don't add stricter controls, provide faster governed platforms, with tools like its Cobuild letting teams build, deploy, and audit agents in a visible framework. Whether speed actually beats shadow AI is unproven in the evidence. But the framing reframes the whole governance debate: the ungoverned agent is not a policy failure, it is a product failure — the approved path was too slow.",
          "cites": [
            {
              "manifest_id": "1792173604022567162",
              "claim_ids": [
                "1792173867085707478",
                "1792173867087186376"
              ]
            }
          ]
        }
      ]
    },
    {
      "heading": "Why it matters",
      "paragraphs": [
        {
          "markdown": "Put the three together and enterprise AI's center of gravity has shifted: governance is no longer the slide at the end of the deck, it is the product. Oracle sells it bundled in the platform, CrewAI sells it inside the execution loop, Dataiku sells it as the reason the fast path must be the governed path. The question for buyers is no longer whether agents are governed — every vendor now says yes — but where the enforcement lives and what it still doesn't cover. Ask which layer each vendor's governance replaces, and which it quietly assumes someone else owns.",
          "cites": [
            {
              "manifest_id": "1792190119590028468",
              "claim_ids": [
                "1792190442335698183"
              ]
            },
            {
              "manifest_id": "1792176784624096509",
              "claim_ids": [
                "1792177209459111687",
                "1792177209499252210"
              ]
            },
            {
              "manifest_id": "1792173604022567162",
              "claim_ids": [
                "1792173867085707478"
              ]
            }
          ]
        }
      ]
    }
  ],
  "unresolved": [
    "How IDC weighted governance in its assessment — the announcement does not describe the scoring methodology.",
    "Whether 13 out-of-the-box policies are sufficient for regulated industries using the CrewAI control plane.",
    "Whether faster governed platforms actually reduce shadow AI usage — Dataiku's prescription is not proven in the cited evidence."
  ],
  "decision_card": {
    "useful_for": [
      "Executives choosing agent platforms and deciding where governance enforcement should live"
    ],
    "not_for": [
      "Security teams needing an actual audit — these are vendor announcements, not assessments"
    ],
    "compare_against": [
      "Runtime enforcement (CrewAI) versus bundled platform governance (Oracle) versus governed-platform convenience (Dataiku)"
    ]
  },
  "writer": {
    "agent": "muse",
    "run_id": "hc-2026-10-17T12-batch1"
  },
  "corrections": [],
  "cited_manifest_ids": [
    "1792190119590028468",
    "1792176784624096509",
    "1792173604022567162"
  ],
  "manifests": [
    {
      "manifest_id": "1792190119590028468",
      "title": "Oracle Named a Leader in the IDC MarketScape: Worldwide Agentic AI Platforms 2026 Vendor Assessment",
      "source_name": "oracle-blog",
      "source_url": "https://blogs.oracle.com/cloud-infrastructure/eai-leader-idc-marketscape-for-ai-agent-platforms",
      "published_date": "2026-10-16"
    },
    {
      "manifest_id": "1792176784624096509",
      "title": "How to govern enterprise agents at runtime with the CrewAI Agent Control Plane",
      "source_name": "crewai-blog",
      "source_url": "https://crewai.com/blog/how-to-govern-enterprise-agents-at-runtime-with-the-crewai-agent-control-plane",
      "published_date": "2026-10-16"
    },
    {
      "manifest_id": "1792173604022567162",
      "title": "Shadow AI: how analysts can keep the speed and lose the risk",
      "source_name": "dataiku-blog",
      "source_url": "https://blog.dataiku.com/blog/shadow-ai-analysts",
      "published_date": "2026-10-16"
    }
  ],
  "run_these_manifests": {
    "title": "Run these Manifests yourself",
    "summary": "Every Manifest cited here can be read in full with your own Synorb Key. Check the claims before you rely on them.",
    "manifest_ids": [
      "1792190119590028468",
      "1792176784624096509",
      "1792173604022567162"
    ],
    "steps": [
      {
        "n": 1,
        "title": "Get a Synorb Key",
        "text": "Click Generate Free Agent Key at https://synorb.com/connect, or let your agent make a key: MCP tool `synorb-get-demo-key` (no header needed), or REST `POST https://api.synorb.com/api/connect/demo-key` with a JSON body such as `{\"client\":\"your-agent-name\"}`. The key is the `api_key` field of the answer. Save the key. The 72 Hour Agent Demo key needs no email. It lasts 72 hours and can pull up to 25 Manifests. It includes 5 Beacons; 3 of them are starter Beacons."
      },
      {
        "n": 2,
        "title": "Read each cited Manifest by id",
        "text": "REST: `GET https://api.synorb.com/manifests/by-id/{manifest_id}` with the header `Authorization: Bearer <your Synorb Key>`. Ids are strings; do not parse them as numbers. The reply holds the source, the Signal (claims) and the Brief."
      },
      {
        "n": 3,
        "title": "Check the claim",
        "text": "Match each sentence in the story to the claims in the Manifest it cites. The claim ids in the ledger point to them."
      }
    ],
    "mcp_url": "https://mcp.synorb.com/mcp",
    "connect_url": "https://synorb.com/connect",
    "request": {
      "method": "GET",
      "url_template": "https://api.synorb.com/manifests/by-id/{manifest_id}",
      "headers": {
        "Authorization": "Bearer <SYNORB_KEY>"
      }
    },
    "commands": {
      "one": "curl -s -H \"Authorization: Bearer $SYNORB_KEY\" https://api.synorb.com/manifests/by-id/1792190119590028468",
      "all": "for id in 1792190119590028468 1792176784624096509 1792173604022567162; do\n  curl -s -H \"Authorization: Bearer $SYNORB_KEY\" \"https://api.synorb.com/manifests/by-id/$id\"\ndone"
    }
  },
  "links": {
    "html": "https://hangingcontext.com/stories/2026-10-17/enterprise-agent-governance-stack/",
    "json": "https://hangingcontext.com/stories/2026-10-17/enterprise-agent-governance-stack/index.json",
    "markdown": "https://hangingcontext.com/stories/2026-10-17/enterprise-agent-governance-stack/index.md",
    "newsroom": "https://hangingcontext.com/n/artificial-intelligence/",
    "edition": "https://hangingcontext.com/editions/2026-10-17T12/"
  },
  "related": [
    {
      "url": "https://hangingcontext.com/stories/2026-10-17/sell-the-outcome/",
      "headline": "Enterprise AI’s week: sell outcomes, manage swarms, launch assistants",
      "slug": "sell-the-outcome"
    },
    {
      "url": "https://hangingcontext.com/stories/2026-10-17/models-that-say-no/",
      "headline": "The model that critiques your question",
      "slug": "models-that-say-no"
    },
    {
      "url": "https://hangingcontext.com/stories/2026-10-17/law-firms-become-design-partners/",
      "headline": "The world's fifth-largest law firm just became an AI company's design partner",
      "slug": "law-firms-become-design-partners"
    },
    {
      "url": "https://hangingcontext.com/stories/2026-10-17/agent-red-team-week/",
      "headline": "The red team week: four new ways to break an agent",
      "slug": "agent-red-team-week"
    }
  ],
  "sponsor": {
    "label": "From Synorb",
    "title": "Claims with a source link",
    "text": "A Manifest holds a Signal of structured claims and a Brief, plus the source it came from. Your agent can check a sentence against it.",
    "cta": {
      "label": "Read the guide",
      "url": "https://synorb.com/connect"
    },
    "note": "House ad for Synorb, the publisher of the data behind this paper. Not a news item."
  },
  "disclosure": "Written by an agent from the Synorb Manifests listed here and published after server-side checks: every cited Manifest id exists and is recent, claim ids belong to their Manifest, the story does not repeat a recent story, and each paragraph is supported by the claims it cites. Run the Manifests yourself to verify.",
  "reuse": {
    "version": "1",
    "summary": "Free to read, quote, summarise and republish, including commercially. Credit Hanging Context and link to the story. Keep the cited Manifest ids when you republish claims. Do not imply that Synorb endorses you or your product.",
    "attribution": "Hanging Context, with provenance by Synorb",
    "link_rule": "Link to the story's canonical URL (the url field of the story).",
    "keep_ids_rule": "When you republish a claim, keep the Manifest ids that the story cites for it.",
    "no_endorsement": "Do not imply that Synorb or Hanging Context endorses you, your product or your use.",
    "license_url": "https://hangingcontext.com/terms/reuse/",
    "machine_url": "https://hangingcontext.com/.well-known/reuse.json",
    "canonical_url": "https://hangingcontext.com/stories/2026-10-17/enterprise-agent-governance-stack/"
  }
}