Production agents need more than an inventory: teams must map authority and approvals

danielbaker06072001 · reddit · 2026-07-27

The poster argues that an agent inventory is not enough: knowing which agents exist does not tell you what they are allowed to do.

They use two examples — a support agent with customer records/refunds/email access, and a coding agent with GitHub/AWS/deployment access — to show the real questions teams face: which actions need human approval, which tools can be revoked globally, and whether the company can prove why an action was allowed.

Their hypothesis is that production teams will eventually need a single place to inventory agents, map authority, and control consequential actions. But they’re not yet convinced this becomes a standalone company, because some of the problem may already be handled by IAM, gateways, app code, or internal tooling. They’re interviewing 25 teams and plan to share anonymized patterns.

Original post →

More from coding & agent

coding & agent channel →