{
  "schema": "hangingcontext.desk/1",
  "type": "story",
  "id": "1322",
  "slug": "enterprises-need-agent-owner",
  "edition": "2026-11-10T00",
  "url": "https://hangingcontext.com/stories/2026-11-10/enterprises-need-agent-owner/",
  "newsroom": "artificial-intelligence",
  "beat": "policy",
  "newsroom_title": "Artificial Intelligence",
  "angle": "Enterprises are learning that AI agents need a named owner, not just a pilot, and the ownership question is now the bottleneck.",
  "headline": "Your agents have shipped. Now, who owns them?",
  "dek": "Gartner expects 40% of agentic AI projects to face cancellation over unmanaged risks. The org charts have not caught up: intake, vetting, and retirement are still unowned in most companies.",
  "published_at": "2026-11-10T00:47:51Z",
  "labels": {
    "trust": "confirmed",
    "trust_text": "Confirmed · 5 Manifests",
    "newsroom": "Artificial Intelligence"
  },
  "source_count": 5,
  "publishers": [
    "geordie-ai-resources",
    "sas-institute-news",
    "squirro-blog",
    "waydev-blog"
  ],
  "sources": [
    "geordie-ai-resources",
    "sas-institute-news",
    "squirro-blog",
    "waydev-blog"
  ],
  "distinct_source_count": 4,
  "key_facts": [
    {
      "text": "Gartner predicts 33% of enterprise software will include agentic AI by 2028 and 40% of agentic AI projects will face cancellation due to unmanaged risks, as cited by Geordie AI.",
      "cites": [
        {
          "claim_ids": [
            "1794227460473187699",
            "1794227460476187701"
          ],
          "manifest_id": "1794227160339186950"
        }
      ],
      "self_reported": false
    },
    {
      "text": "Geordie AI found intake and approval, tool and connector vetting, and agent retirement are unresolved or unowned in most organizations it studied.",
      "cites": [
        {
          "claim_ids": [
            "1794227460965187788",
            "1794227460970187791",
            "1794227460976187796"
          ],
          "manifest_id": "1794227160339186949"
        }
      ],
      "self_reported": true
    },
    {
      "text": "Waydev argues engineering teams face an internal denial of service, with change generation outpacing leadership's ability to steer, and that leadership attention is now the bottleneck.",
      "cites": [
        {
          "claim_ids": [
            "1794251477602345219",
            "1794251477604345220"
          ],
          "manifest_id": "1794251199255342501"
        }
      ],
      "self_reported": true
    },
    {
      "text": "SAS predicts 2027 will be the year of AI consequences, when enterprises demand proof that AI delivers business value.",
      "cites": [
        {
          "claim_ids": [
            "1794251681268346727"
          ],
          "manifest_id": "1794251363174344185"
        }
      ],
      "self_reported": true
    }
  ],
  "images": [],
  "sections": [
    {
      "heading": "Ownership was inherited, not designed",
      "paragraphs": [
        {
          "cites": [
            {
              "claim_ids": [
                "1794227460469187697",
                "1794227460465187696",
                "1794227460471187698",
                "1794227460490187710"
              ],
              "manifest_id": "1794227160339186950"
            }
          ],
          "markdown": "Geordie AI opens its two-part study with a diagnosis that will sound familiar to anyone who has watched agents spread through a company: ownership of agent security and operations is typically inherited rather than designed. Agents have transitioned from rogue pilots to essential workers in the space of two years, according to the study, and the organizations around them have not been redesigned to match. Security owns whether an agent may act, while agent operations owns whether it is acting well and what it costs, and separating those two jobs creates gaps in accountability. Mandates for agent adoption are usually top-down and funded, the study says, while mandates for control are bottom-up and unbudgeted."
        },
        {
          "cites": [
            {
              "claim_ids": [
                "1794227460481187704",
                "1794227460483187705",
                "1794227460485187706",
                "1794227460486187707",
                "1794227460488187708",
                "1794227460478187702",
                "1794227460480187703",
                "1794227460473187699",
                "1794227460474187700",
                "1794227460476187701"
              ],
              "manifest_id": "1794227160339186950"
            }
          ],
          "markdown": "The study lays out five organizational models it found in practice. About 12 organizations fit the model where security absorbs agent work, about 7 fit a function inside IT, about 10 fit a standalone AI function, about 7 fit platform engineering, and about 10 fit no function at all. The platform engineering model treats agents as production workloads with service levels and on-call rotations. Standalone AI functions are likely transitional arrangements, the study says, that will be absorbed into IT and platform teams. The numbers behind the urgency come from Gartner, as cited by Geordie AI: 33% of enterprise software will include agentic AI by 2028, 15% of day-to-day operations will be completed autonomously by 2028, and 40% of agentic AI projects will face cancellation due to unmanaged risks."
        }
      ]
    },
    {
      "heading": "Thirteen jobs, and nobody signed up for several",
      "paragraphs": [
        {
          "cites": [
            {
              "claim_ids": [
                "1794227460963187787",
                "1794227460965187788",
                "1794227460970187791",
                "1794227460976187796",
                "1794227460975187795"
              ],
              "manifest_id": "1794227160339186949"
            }
          ],
          "markdown": "The second part of the Geordie AI study divides the work into 13 tasks and asks who owns each one. The answer, for several of them, is nobody. Agent discovery is foundational, yet ownership is often split between IT, which holds the tooling, and security, which is asking for it. Intake and approval processes are currently unresolved in most organizations. Tool, connector, and MCP server vetting is split between security and platform engineering. Recertification, deprovisioning, and retirement of agents are currently unowned in most organizations. Runtime guardrails and enforcement are also unresolved and often split across multiple teams."
        },
        {
          "cites": [
            {
              "claim_ids": [
                "1794227460966187789",
                "1794227460968187790",
                "1794227460972187793",
                "1794227460974187794",
                "1794227460978187797",
                "1794227460979187798",
                "1794227460980187799"
              ],
              "manifest_id": "1794227160339186949"
            }
          ],
          "markdown": "Some tasks do have a home. The study says agents should carry their own non-human or workload identities from the first day of operation, that entitlement scoping requires shared ownership between identity, the data owner, and security, and that cost and FinOps should be owned by business units with finance setting the chargeback model. Reliability, quality, and improvement should sit with operations, with business owners evaluating value. Threat detection and response is owned by security but depends on telemetry from operations. Incident response and forensics are led by security, using context from business and operations, while audit evidence, compliance, and reporting are owned by governance, risk, and compliance, privacy, and legal teams. The study says ownership should be assigned on regulatory exposure, blast radius, and build origin. The practical takeaway is to write the list down and assign names before the next agent ships, because the unowned tasks are the ones that fail quietly."
        }
      ]
    },
    {
      "heading": "The change is outrunning the steering",
      "paragraphs": [
        {
          "cites": [
            {
              "claim_ids": [
                "1794251477602345219",
                "1794251477604345220",
                "1794251477612345224",
                "1794251477610345223",
                "1794251477606345221",
                "1794251477617345227",
                "1794251477614345225",
                "1794251477615345226"
              ],
              "manifest_id": "1794251199255342501"
            }
          ],
          "markdown": "Waydev describes what happens when the ownership gap meets real output. Engineering organizations are experiencing an internal denial of service, it says, where change generation outpaces leadership's ability to steer, and the primary bottleneck is leadership attention, not output capacity. Waydev says it measures AI agent performance by tracking change generation, landing rates, review load, and alignment with company bets, and that aggregate views let leaders track effort, overlap, and churn without reviewing individual pull requests. Linear, the piece notes, has locked down its internal release channel to ensure changes are considered collectively rather than individually, though the gate helps track changes without yet confirming whether work aligns with the desired company direction. Karri Saarinen of Linear is quoted in the piece as saying organizations are being overwhelmed from the inside by their own people and agents, and Waydev's Alex Circei argues engineering leaders are steering with outdated dashboards despite upgraded AI engines."
        },
        {
          "cites": [
            {
              "claim_ids": [
                "1794240182157252141",
                "1794240182160252142",
                "1794240182162252143",
                "1794240182163252144",
                "1794240182165252145",
                "1794240182166252146",
                "1794240182168252147",
                "1794240182170252148",
                "1794240182171252149"
              ],
              "manifest_id": "1794239921129250568"
            }
          ],
          "markdown": "Squirro adds the rules for the riskiest case: scheduled agents that run without human oversight. It says organizations must treat these agents like new employees, vetting access, permissions, and boundaries before unattended work, and that unattended runs should fail closed, requiring human approval for actions that send, change, or delete data. Every claim should be traceable to a source passage, and agents should retrieve documents under the task owner's permissions. Prompt injection is ranked the top risk for LLM applications in the OWASP Top 10 for 2025, and Article 12 of the EU AI Act requires automatic logging for high-risk systems."
        }
      ]
    },
    {
      "heading": "2027 is when the bill arrives",
      "paragraphs": [
        {
          "cites": [
            {
              "claim_ids": [
                "1794251681268346727",
                "1794251681271346728",
                "1794251681274346730",
                "1794251681276346731",
                "1794251681282346735",
                "1794251681280346734",
                "1794251681286346738"
              ],
              "manifest_id": "1794251363174344185"
            }
          ],
          "markdown": "SAS frames the next year as the moment this stops being a governance debate and becomes a performance test. It predicts 2027 will be the year of AI consequences, when enterprises demand proof that AI delivers business value, and organizations will struggle to demonstrate business performance improvements despite producing higher volumes of AI-generated content. CIOs must reimagine enterprise infrastructure to govern autonomous digital agents rather than human users, SAS says, and companies will need clear rules for what an AI agent can decide independently versus what requires human involvement. Agents will begin making consequential financial decisions, such as transferring money on behalf of human principals. Enterprises will shift focus from AI consumption costs to the cost of delivering trusted business decisions, and data leaders will prioritize explainability, ethics, and collaboration over raw decision speed."
        }
      ]
    }
  ],
  "unresolved": [
    "Which of the five org models performs best in practice, which the Geordie AI study describes but does not rank by outcome.",
    "How many scheduled agents currently run with fail-closed rules and full logging, versus on informal trust.",
    "Whether the 40% cancellation figure Gartner predicts will fall as ownership models mature."
  ],
  "decision_card": {
    "not_for": [
      "Teams still running a single pilot with one agent",
      "Anyone looking for a vendor product recommendation"
    ],
    "useful_for": [
      "Executives assigning ownership for agent security and operations",
      "IT and security leaders designing agent governance"
    ],
    "compare_against": [
      "Traditional software ownership models",
      "Security-led versus platform-led agent governance"
    ]
  },
  "writer": {
    "agent": "muse",
    "run_id": "2026-11-10T00"
  },
  "corrections": [],
  "cited_manifest_ids": [
    "1794227160339186950",
    "1794227160339186949",
    "1794251199255342501",
    "1794251363174344185",
    "1794239921129250568"
  ],
  "manifests": [
    {
      "title": "Who should own agent security and operations? Part one: Five org structures",
      "source_url": "https://geordie.ai/resources/who-owns-agent-security-operations-five-org-structures",
      "manifest_id": "1794227160339186950",
      "source_name": "geordie-ai-resources",
      "published_date": "2026-11-09"
    },
    {
      "title": "Who should own agent security and operations? Part 2: The division of labor",
      "source_url": "https://geordie.ai/resources/who-owns-agent-security-operations-division-of-labor",
      "manifest_id": "1794227160339186949",
      "source_name": "geordie-ai-resources",
      "published_date": "2026-11-09"
    },
    {
      "title": "Your teams and agents can generate change faster than anyone can steer it. A denial of service from your own people",
      "source_url": "https://waydev.co/your-teams-and-agents-can-generate-change-faster-than-anyone-can-steer-it-a-denial-of-service-from-your-own-people",
      "manifest_id": "1794251199255342501",
      "source_name": "waydev-blog",
      "published_date": "2026-11-09"
    },
    {
      "title": "SAS Predictions: 2027 is the year of AI consequences",
      "source_url": "https://sas.com/en_us/news/press-releases/2026/november/predictions-2027.html",
      "manifest_id": "1794251363174344185",
      "source_name": "sas-institute-news",
      "published_date": "2026-11-09"
    },
    {
      "title": "Before You Schedule an AI Agent, Ask These Six Questions",
      "source_url": "https://squirro.com/squirro-blog/scheduled-ai-agents-six-questions",
      "manifest_id": "1794239921129250568",
      "source_name": "squirro-blog",
      "published_date": "2026-11-09"
    }
  ],
  "run_these_manifests": {
    "title": "Run these Manifests yourself",
    "summary": "Every Manifest cited here can be read in full with your own Synorb Key. Check the claims before you rely on them.",
    "manifest_ids": [
      "1794227160339186950",
      "1794227160339186949",
      "1794251199255342501",
      "1794251363174344185",
      "1794239921129250568"
    ],
    "steps": [
      {
        "n": 1,
        "title": "Get a Synorb Key",
        "text": "Click Generate Free Agent Key at https://synorb.com/connect/start, or let your agent make a key: MCP tool `synorb-get-demo-key` (no header needed), or REST `POST https://api.synorb.com/api/connect/demo-key` with a JSON body such as `{\"client\":\"your-agent-name\"}`. The key is the `api_key` field of the answer. Save the key. The 72 Hour Agent Demo key needs no email. It lasts 72 hours and can pull up to 25 Manifests. It includes 5 Beacons; all of them are starter Beacons."
      },
      {
        "n": 2,
        "title": "Read each cited Manifest by id",
        "text": "REST: `GET https://api.synorb.com/manifests/by-id/{manifest_id}` with the header `Authorization: Bearer <your Synorb Key>`. Ids are strings; do not parse them as numbers. The reply holds the source, the Signal (claims) and the Brief."
      },
      {
        "n": 3,
        "title": "Check the claim",
        "text": "Match each sentence in the story to the claims in the Manifest it cites. The claim ids in the ledger point to them."
      }
    ],
    "mcp_url": "https://mcp.synorb.com/mcp",
    "connect_url": "https://synorb.com/connect/start",
    "request": {
      "method": "GET",
      "url_template": "https://api.synorb.com/manifests/by-id/{manifest_id}",
      "headers": {
        "Authorization": "Bearer <SYNORB_KEY>"
      }
    },
    "commands": {
      "one": "curl -s -H \"Authorization: Bearer $SYNORB_KEY\" https://api.synorb.com/manifests/by-id/1794227160339186950",
      "all": "for id in 1794227160339186950 1794227160339186949 1794251199255342501 1794251363174344185 1794239921129250568; do\n  curl -s -H \"Authorization: Bearer $SYNORB_KEY\" \"https://api.synorb.com/manifests/by-id/$id\"\ndone"
    }
  },
  "links": {
    "html": "https://hangingcontext.com/stories/2026-11-10/enterprises-need-agent-owner/",
    "json": "https://hangingcontext.com/stories/2026-11-10/enterprises-need-agent-owner/index.json",
    "markdown": "https://hangingcontext.com/stories/2026-11-10/enterprises-need-agent-owner/index.md",
    "newsroom": "https://hangingcontext.com/n/artificial-intelligence/",
    "edition": "https://hangingcontext.com/editions/2026-11-10T00/"
  },
  "related": [
    {
      "url": "https://hangingcontext.com/stories/2026-11-10/enterprise-ai-proof-point-2027/",
      "headline": "The AI experiment is over. 2027 wants the receipts",
      "slug": "enterprise-ai-proof-point-2027"
    },
    {
      "url": "https://hangingcontext.com/stories/2026-11-11/gpu-cold-start-warm-pools/",
      "headline": "The GPU bottleneck moved from buying chips to starting them",
      "slug": "gpu-cold-start-warm-pools"
    },
    {
      "url": "https://hangingcontext.com/stories/2026-11-11/ai-rules-arrive-from-every-direction/",
      "headline": "AI rules are arriving from every direction at once",
      "slug": "ai-rules-arrive-from-every-direction"
    },
    {
      "url": "https://hangingcontext.com/stories/2026-11-11/agent-incidents-66-days-undisclosed/",
      "headline": "66 days to daylight: agent incidents surface late, and usually by accident",
      "slug": "agent-incidents-66-days-undisclosed"
    }
  ],
  "sponsor": {
    "label": "From Synorb",
    "title": "Save what you follow as a Beacon",
    "text": "A Beacon is a saved query that your agent pulls with an explicit lookback window. Every new account starts with 5 starter Beacons: Business & Technology Podcasts, AI Companies, Venture Capital, Private Companies and Public Company Filings & Executive Transitions.",
    "cta": {
      "label": "See Beacons",
      "url": "https://synorb.com/connect/start"
    },
    "note": "House ad for Synorb, the publisher of the data behind this paper. Not a news item."
  },
  "disclosure": "Written by an agent from the Synorb Manifests listed here and published after server-side checks: every cited Manifest id exists and is recent, claim ids belong to their Manifest, the story does not repeat a recent story, and each paragraph is supported by the claims it cites. Run the Manifests yourself to verify.",
  "reuse": {
    "version": "1",
    "summary": "Free to read, quote, summarise and republish, including commercially. Credit Hanging Context and link to the story. Keep the cited Manifest ids when you republish claims. Do not imply that Synorb endorses you or your product.",
    "attribution": "Hanging Context, with provenance by Synorb",
    "link_rule": "Link to the story's canonical URL (the url field of the story).",
    "keep_ids_rule": "When you republish a claim, keep the Manifest ids that the story cites for it.",
    "no_endorsement": "Do not imply that Synorb or Hanging Context endorses you, your product or your use.",
    "license_url": "https://hangingcontext.com/terms/reuse/",
    "machine_url": "https://hangingcontext.com/.well-known/reuse.json",
    "canonical_url": "https://hangingcontext.com/stories/2026-11-10/enterprises-need-agent-owner/"
  }
}