Episode 702: Who Gave Your AI Agent That Authority?
Calvin Hendryx-Parker, co-founder and CTO of Six Feet Up, joins Keith Townsend to ask a question CTOs should be asking now: who gave your AI agent that authority? They start with two recent stories, the reported AWS AgentCore case where an agent fetched IAM session credentials from the metadata server on a user's behalf, and a Codex CLI update that leaves a self-updating daemon running after you quit, restarting itself mid-turn when a new version lands. From there, enterprise persistent memory and which principal an agent acts as when it changes how your business works, Slack bots invited into federated channels, and who is accountable when an agent chases a goal in a way nobody instructed. Calvin's practical advice is granular, explicit roles on the containers agents run in, using the Paperclip meta harness with a Kubernetes agent operator. Keith closes with four governance tests: authorization boundaries, state exportability, behavior traceability, and memory independence.