Engineers Must Design Boundaries, Not Just Code

Identity and permissions alone are insufficient to secure enterprise AI agents, according to Box's CISO Heather Ceylan. Autonomous agents can exploit legitimate access to cause unintended damage at scale and speed that humans cannot match. Enterprise AI security must evolve beyond access controls to include execution governance, with dynamic permissions that scope access to specific tasks and steps rather than broad standing grants.

Autonomous AI agents operating in production environments require a three-layer security architecture spanning infrastructure, network, and control plane rather than relying on single-point controls like prompt guardrails. Oscar Wahlberg of Nutanix argues that traditional application-level security cannot contain risks unique to agentic systems, such as agents misusing granted credentials or hallucinating dangerous actions. The defense-in-depth approach divides security responsibilities across hardware trust, dynamic network governance, and centralized control to address distinct categories of risk.

Researchers at Meta AI and University of Illinois Urbana-Champaign developed EvoHarness-RL, a training framework that enables smaller AI models to perform complex, long-horizon tasks by learning to dynamically manage their execution environment rather than following rigid, manually-coded instructions. The approach consolidates agent support systems into a unified Belief, Progress, and Experience workspace, allowing models to independently decide when and how to consult external state during workflows. This addresses a key limitation in current agentic systems where manual prompts and static memory structures require extensive retuning for each model upgrade.

OpenClaw 2.0, an open-source AI coding harness, has shifted from a personal developer tool to enterprise-focused infrastructure with multi-user collaboration, shared cloud sessions, and enhanced security controls. The update includes a redesigned browser interface that consolidates conversations, files, approvals, and agent activity into a single workspace. Creator Peter Steinberger reports the team built the update using OpenClaw itself, moving away from individual local coding environments toward shared team workspaces.