Agent Mode AI

Episode 19 of Agent Mode AI. Abby and Avery compose AM-159 (Anthropic Wall Street agents launch 5 May 2026, vertical-stack signal) with AM-158 (EU AI Act T-100 readiness gap, enforcement 2 August 2026). The episode airs 131 days after the Anthropic launch and 42 days into the EU AI Act enforcement window, so both claims have cleared first review and the predicted outcomes are testable on air. The composition: Anthropic accelerates enterprise AI procurement from the vertical-agent end (Wall Street agents, Moody's partnership, Microsoft 365 integration); the EU AI Act slows procurement from the regulatory-deadline end. Which force won inside Q3 2026, and what that means for the enterprises that hadn't completed AM-158 readiness by 2 August. The chapter cross-references EP006 (Article 50 walk) and EP017 (Karpathy and the pre-training end of the same vertical stack). Sources cited: - Fortune coverage of Anthropic Wall Street launch, 5 May 2026 - Moody's partnership announcement, May 2026 - Microsoft 365 and Anthropic integration documentation - EU AI Act consolidated text (Regulation 2024/1689) - EU AI Office implementing guidance, 2026 - Supervisory-authority enforcement actions published 2 Aug – 13 Sep 2026 (confirmed at draft time) Claims tracked: - AM-158 — EU AI Act T-100 readiness budget gap — agentmodeai.com/holding/?claim=AM-158 - AM-159 — Anthropic Wall Street agents, cross-industry read — agentmodeai.com/holding/?claim=AM-159 Newsletter and the full Holding-up ledger: agentmodeai.com

Episode 18 of Agent Mode AI. Abby and Avery walk AM-155, AM-156 and AM-157 — the May 17 batch that the publication composed as a credentials-to-surface-to- execution chain. AM-155 reads the CSRB Storm-0558 findings forward into 2026 enterprise AI agent credential storage. AM-156 names shadow-AI detection lag as structural to the audit model, not procedural — Samsung 2023 as the recurring pattern, not a one-time incident. AM-157 walks the May 2026 Microsoft Semantic Kernel CVEs (CVE-2026-25592, CVE-2026-26030) and the MCP STDIO advisories that turn prompt injection from a model-output problem into a host-level RCE problem. The trilogy as one chain — credential exposure plus undetected surface plus framework-RCE — is what no single piece could carry alone. The episode airs 112 days after the May 17 batch, so each claim has cleared its first review cadence. The closing chapter names the three questions the trilogy added to the AI MSA red-team checklist. Sources cited: - CSRB report on Storm-0558 (2024, referenced) - Samsung internal memo coverage, 2023 - CVE-2026-25592 and CVE-2026-26030, NIST NVD - MCP STDIO advisories, Anthropic, May 2026 - Windsurf 1.9544.26 advisory - Vendor disclosures published May–September 2026 (confirmed at draft time) Claims tracked: - AM-155 — Non-human identity after the CSRB report — agentmodeai.com/holding/?claim=AM-155 - AM-156 — Shadow-AI detection lag is structural — agentmodeai.com/holding/?claim=AM-156 - AM-157 — Prompt injection crosses the RCE threshold — agentmodeai.com/holding/?claim=AM-157 Newsletter and the full Holding-up ledger: agentmodeai.com

Episode 17 of Agent Mode AI. Abby and Avery walk AM-160 (the CIO vendor-trajectory read of Karpathy joining Anthropic's pre-training team on 19 May 2026) and OPS-070 (the operator-side 70% concentration rule). The episode airs 103 days after the announcement and 13 days after the AM-160 marker-check date — so the four observable markers (Claude-in-the-loop research paper, Claude release with credited methodology, leadership commentary, attributed benchmark gains) have been reviewed by airdate. The career arc threads through (OpenAI founding cohort 2015, Tesla Autopilot and AI 2017–2022, OpenAI second tour 2023–2024, Eureka Labs 2024, Anthropic May 2026) as context for why those four markers were chosen. The procurement implications stand: AI-vendor questionnaires should add a model-improvement-methodology disclosure field, and multi-year MSAs should add a research-roadmap-attestation clause with ≥30-day notice. The OPS-070 chapter revisits whether the secondary-lab subscription is still the resilience play for 1–50p operators 100 days into the mandate. Sources cited: - Anthropic announcement, 19 May 2026 - TechCrunch coverage, 19 May 2026 - Axios coverage, 19 May 2026 - CNBC coverage, 19 May 2026 - Reuters via TradingView, 19 May 2026 - Fortune coverage, 19 May 2026 - Stanford CS231n course materials (public) - Karpathy GitHub repositories (nanoGPT, micrograd) Claims tracked: - AM-160 — Karpathy at Anthropic, vendor-trajectory read — agentmodeai.com/holding/?claim=AM-160 - OPS-070 — Karpathy at Anthropic, operator 70% concentration check — agentmodeai.com/holding/?claim=OPS-070 Newsletter and the full Holding-up ledger: agentmodeai.com

Episode 13 of Agent Mode AI. Abby and Avery walk AM-012, the claim that the enterprise IT operations workforce is structurally the highest-exposure population to autonomous-action AI. The task surface that defines the family — incident triage, configuration management, ticket processing, routine diagnostics, scripted remediation — maps onto the agent-class capability boundary more directly than any other large enterprise job-family. The US Bureau of Labor Statistics Occupational Outlook Handbook projects Computer and Information Technology occupations to grow faster than average through 2033 with substantial role-mix shifts inside the family. The World Economic Forum Future of Jobs Report 2025 reads the same job-family bimodally: routine-task sub-population in the displacement cohort, AI-adjacent sub-population in the creation cohort, 2030 horizon. Anthropic chief executive officer Dario Amodei's twenty-eighth of May 2025 Axios interview projected that AI could eliminate half of entry-level white-collar jobs over the next one to five years. The procurement-deck distinction is between the agent-orchestration posture (team scales toward managing fleets of agents) and the agent-replacement posture (team contracts through churn). Sources cited: - US Bureau of Labor Statistics Occupational Outlook Handbook, Computer and Information Technology occupations, 2023-2033 cycle - World Economic Forum Future of Jobs Report 2025 - Dario Amodei interview with Axios, 28 May 2025 - McKinsey "Seizing the agentic AI advantage" workforce findings - Atlanta Federal Reserve Workforce Currents data on AI-skill wage premium Claims tracked: - AM-012 — IT operations as highest-exposure workforce population — agentmodeai.com/holding/?claim=AM-012 - AM-006 — Atlanta Fed wage-premium and BCG frontline access gap — agentmodeai.com/holding/?claim=AM-006 - AM-010 — Chief information officer playbook five operational characteristics — agentmodeai.com/holding/?claim=AM-010 - AM-011 — Change-management variable in deployment success — agentmodeai.com/holding/?claim=AM-011 Newsletter and the full Holding-up ledger: agentmodeai.com

Episode 12 of Agent Mode AI. Abby and Avery walk AM-009, the claim that Anthropic's Claude for Chrome launch is a procurement-decision data point about the maturity of the browser-resident agentic AI class rather than about Anthropic specifically. The published security disclosure on the launch reports a twenty-three point six percent prompt-injection success rate pre-mitigation, eleven point two percent post-mitigation, and zero percent on URL-injection variants after subsequent patches, against a defined attack corpus. The procurement-relevant signal is the published-disclosure posture itself, which places Anthropic in Cohort A under the AM-007 vendor-response-split framework. Brave Software's adjacent research on Comet confirms the prompt-injection class is structural to browser-resident agents rather than Anthropic-specific. The episode concludes with five questions a chief information officer and chief information security officer can require answered in writing before authorising browser-agent pilots. Sources cited: - Anthropic Claude for Chrome announcement, 26 August 2025 - Anthropic published security disclosure on Claude for Chrome - Brave Software research on Comet prompt injection - Simon Willison agentic-browser-security commentary, 25 August 2025 - Zenity Labs AgentFlayer research, Black Hat USA 2025 - EchoLeak CVE-2025-32711, disclosed August 2025 Claims tracked: - AM-009 — Claude for Chrome procurement-grade disclosure pattern — agentmodeai.com/holding/?claim=AM-009 - AM-007 — AgentFlayer cross-agent prompt-injection class vendor-response split — agentmodeai.com/holding/?claim=AM-007 - AM-146 — Three accuracy-disclosure questions for procurement — agentmodeai.com/holding/?claim=AM-146 Newsletter and the full Holding-up ledger: agentmodeai.com

Episode 11 of Agent Mode AI. Abby and Avery walk AM-145, the claim that AI vendor switching in 2026 is bound primarily by contract terms — exit clauses, data-portability obligations, model-deprecation rights — not by technical migration cost. Three forces drive the 2026 procurement story: vendor consolidation (ServiceNow completing the Moveworks acquisition in December 2025, Automation Anywhere closing the Aisera acquisition on the eleventh of November 2025), model-deprecation cadence becoming a recurring contract event, and the first wave of multi-year enterprise agentic AI contracts approaching renewal. Seven clause families repeatedly create the lock-in most enterprises only discover at year two: data-portability scope, model-deprecation rights, sub-processor expansion, output-IP ambiguity, pricing-tier rebalancing, agent-uptime SLA definition gaps, and audit-evidence retention obligations. Article 16 of the EU AI Act applies to deployers from the second of August 2026 with a six-month log retention floor. Sources cited: - ServiceNow announcement on completion of Moveworks acquisition - Automation Anywhere announcement on completion of Aisera acquisition - OpenAI deprecation page - Anthropic model lifecycle policy - Google Vertex AI model versioning page - Microsoft Azure OpenAI model retirement policy - Microsoft Customer Copyright Commitment - Bloomberg report on Klarna, 8 May 2025 - EU AI Act Articles 12 and 16 Claims tracked: - AM-145 — Seven AI vendor exit clauses — agentmodeai.com/holding/?claim=AM-145 - AM-027 — Vendor contract gotchas — agentmodeai.com/holding/?claim=AM-027 - AM-046 — EU AI Act Article 12 audit-evidence template — agentmodeai.com/holding/?claim=AM-046 - RES-005 — AI MSA Red-Team Checklist Newsletter and the full Holding-up ledger: agentmodeai.com

Episode 10 of Agent Mode AI. Abby and Avery walk AM-140, the claim that vendor "successful pilot" references transfer to scaled production at roughly the McKinsey twenty-three percent rate, and that the gap is operational rather than capability-driven. The McKinsey State of AI 2025 survey, published November 2025 with sample size one thousand four hundred ninety-one, is the anchor data point. The Klarna seven-hundred-agent reversal reported by Bloomberg on the eighth of May 2025, the Salesforce Agentforce two-hundred-customer reality through Q1 2026, and the GitHub Copilot token-counting bug acknowledged in April 2026 are the documented walk-backs that bound what reference language can credibly imply. CRMArena-Pro thirty-five percent multi-step reliability and the EchoLeak CVE cross-agent class are the structural failure-mode evidence. Six pre-pilot questions for the procurement committee close the gap. Sources cited: - McKinsey State of AI 2025, published November 2025, n=1,491 - Bloomberg report on Klarna, 8 May 2025 - The Information report on Salesforce Agentforce, April 2025 - GitHub Copilot changelog, 18 April 2026 - CRMArena-Pro paper, Salesforce AI Research, August 2025 - Carnegie Mellon TheAgentCompany academic benchmark - EchoLeak CVE-2025-32711, disclosed August 2025 Claims tracked: - AM-140 — Vendor pilot reference to procuring-enterprise scaled production transfer rate — agentmodeai.com/holding/?claim=AM-140 - AM-030 — McKinsey 23% from IT-leader perspective — agentmodeai.com/holding/?claim=AM-030 - AM-128 — MIT 95% pilot-failure claim — agentmodeai.com/holding/?claim=AM-128 Newsletter and the full Holding-up ledger: agentmodeai.com

Episode 9 of Agent Mode AI. Abby and Avery walk AM-146, the claim that vendor "ready-to-run" positioning without named task, named baseline, and named methodology is procurement-deck noise rather than procurement evidence. The procurement-grade reference shapes in 2026 are the academic-benchmark layer (CRMArena-Pro 35% multi-step reliability, CMU TheAgentCompany 30-35% reproduction range, WebArena ~36% browser-agent ceiling, SWE-bench Verified for code generation) and the Anthropic Claude for Chrome disclosure pattern (23.6% pre-mitigation, 11.2% post, 0% on URL-injection variants after patches). A third class — the named-customer audited deployment, with McKinsey Lilli, JPMorgan, BT Now Assist, and UK Government Digital Service as the canonical references — sits alongside. Sources cited: - CRMArena-Pro paper, Salesforce AI Research, August 2025 - Carnegie Mellon TheAgentCompany academic benchmark - WebArena academic benchmark - SWE-bench Verified - Anthropic published security disclosure on Claude for Chrome, 26 August 2025 - McKinsey internal Lilli platform deployment data - JPMorgan Chase 2023 AI value disclosure - BT Now Assist deployment, Hena Jalil - UK Government Digital Service Q4 2024 Claims tracked: - AM-146 — Three accuracy-disclosure questions for procurement — agentmodeai.com/holding/?claim=AM-146 - AM-009 — Claude for Chrome procurement-grade disclosure pattern — agentmodeai.com/holding/?claim=AM-009 - AM-140 — Procurement-committee pre-pilot questions — agentmodeai.com/holding/?claim=AM-140 Newsletter and the full Holding-up ledger: agentmodeai.com

Episode 8 of Agent Mode AI. Abby and Avery walk AM-136, the foundation- model uptime track-record claim. Twenty-four-month operational record across Anthropic, OpenAI, Google, AWS Bedrock, and Azure OpenAI. Why the status pages do not tell the procurement team what they need to know. The SLA-credit gap that almost every enterprise customer discovers only after their first incident. Three multi-provider routing patterns. Three contract language additions every 2026 enterprise renewal MSA should require. Sources cited: - status.anthropic.com (Anthropic incident reports) - status.openai.com (OpenAI incident reports) - status.cloud.google.com (Google Cloud / Gemini API) - health.aws.amazon.com (AWS Service Health Dashboard) - status.azure.com (Azure / Azure OpenAI) - LiteLLM, OpenRouter, Portkey project documentation Claims tracked: - AM-136 — Foundation-model uptime SLA track record — agentmodeai.com/holding/?claim=AM-136 Related claims: - AM-026 — The 60-question agentic AI RFP - AM-138 — Vendor MSA renewal post-EU-AI-Act-enforcement - AM-123 — Agent observability stack Newsletter and the full Holding-up ledger: agentmodeai.com

CORRECTION (10 Jun 2026): The 12/88 statistic central to this episode was retracted on 10 Jun 2026; it does not appear in the cited Stanford source. The audio remains available unchanged as the record. Full correction and restated article: https://agentmodeai.com/why-88-percent-of-agentic-ai-deployments-fail/ Ledger record (AM-029, Not holding): https://agentmodeai.com/holding/?claim=AM-029 Original show notes follow. Episode 7 of Agent Mode AI. Abby and Avery walk the four datasets that document the bimodal ROI distribution in enterprise agentic AI: AM-029 on the Stanford Digital Economy Lab 12/88, AM-132 on the restored bimodal framing, AM-128 on the MIT NANDA GenAI Divide 95% finding, and AM-053 on the McKinsey State of AI 2025 17% EBIT-attribution. Then the GAUGE framework — six dimensions that distinguish the 12% high-performing cohort from the 88% struggling body. Governance, audit substrate, use-case maturity, guardrails, evidence baseline, exit posture. Sources cited: - Stanford Digital Economy Lab Enterprise AI Playbook 2026 (Pereira, Graylin, Brynjolfsson) - McKinsey State of AI 2025 (n=1,993, November 2025) - MIT NANDA State of AI in Business 2025 (Project NANDA / MIT Connection Science, August 2025) - Gartner Q1 2026 Infrastructure & Operations Survey - Fortune coverage of MIT NANDA findings, August 2025 Claims tracked: - AM-029 — Why 88% of agentic AI deployments fail — agentmodeai.com/holding/?claim=AM-029 - AM-132 — The bimodal ROI distribution in enterprise agentic AI — agentmodeai.com/holding/?claim=AM-132 - AM-128 — The MIT 95% GenAI-pilot-failure claim — agentmodeai.com/holding/?claim=AM-128 - AM-053 — The McKinsey 17% EBIT claim — agentmodeai.com/holding/?claim=AM-053 Newsletter and the full Holding-up ledger: agentmodeai.com

Episode 6 of Agent Mode AI. Abby and Avery walk the four claims that interlock around the 2 August 2026 EU AI Act deployer-obligations enforcement window. AM-127 is the falsifiable prediction (three of four operational claims will downgrade by 1 October 2026). AM-135 is the Article 50 transparency UX with chatbot disclosure, generative AI watermarking, biometric notification, and deepfake disclosure. AM-138 is the post-enforcement MSA red-team — three new clause families covering Article 11 technical-file pass-through, Article 16 post-market monitoring support, and Article 26 deployer-documentation supply. AM-046 is the fourteen-field Article 12 audit substrate that the other three obligations feed into. Sources cited: - EU AI Act consolidated text (Regulation 2024/1689) - EU AI Office implementing guidance, 2026 - C2PA Content Credentials specification - Google SynthID documentation - Adobe Content Authenticity Initiative - European Data Protection Board opinion on AI models, 2024 - National supervisory authority enforcement decisions, Q1-Q2 2026 Claims tracked: - AM-127 — Deadline-anchored prediction on operational vs governance claims — agentmodeai.com/holding/?claim=AM-127 - AM-135 — EU AI Act Article 50 transparency disclosure UX — agentmodeai.com/holding/?claim=AM-135 - AM-138 — Vendor MSA renewal post-EU-AI-Act-enforcement — agentmodeai.com/holding/?claim=AM-138 - AM-046 — EU AI Act Article 12 audit-evidence template — agentmodeai.com/holding/?claim=AM-046 Newsletter and the full Holding-up ledger: agentmodeai.com

Episode 5 of Agent Mode AI. Abby and Avery walk through AM-118, AM-119, and the vendor-economics section of AM-121 — three institutional capital cohorts reading the same AI risk surface from three different angles, behaving in three different directions, in 2026. Sources cited: - NBIM (Norges Bank Investment Management) governance documentation, 2015-2026 - CalPERS investment policy publications - Lloyd's of London Futureset systemic-risk programme - Munich Re Cyber Insurance Risk Report 2024-2026 - Swiss Re Institute sigma research 2025 - ServiceNow Q1 FY26 10-Q (SEC EDGAR filing) - Datadog Q3 FY25 10-Q (AI-native cohort disclosure) Claims tracked: - AM-118 — The AI policy void at major pension funds — agentmodeai.com/holding/?claim=AM-118 - AM-119 — Reinsurance market AI tail risk pricing — agentmodeai.com/holding/?claim=AM-119 - AM-121 — AI in IT operations reality check — agentmodeai.com/holding/?claim=AM-121 Newsletter and the full Holding-up ledger: agentmodeai.com

Episode 4 of Agent Mode AI. The operators edition. Abby and Avery walk through OPS-037, OPS-039, and OPS-041 — three places where SMB AI tools generate visible work that misses the regulatory or algorithmic layer the tool was unaware of. Sources cited: - EU OSS scheme + reverse-charge VAT rules (Belastingdienst, HMRC, BZSt) - Burgerlijk Wetboek Boek 3 Article 89, Netherlands (notarial form) - Bürgerliches Gesetzbuch §311b, Federal Republic of Germany - GmbHG §15, Germany (share-transfer notarial form) - KNB (Koninklijke Notariële Beroepsorganisatie) 2024-2026 guidance - BNotK (Bundesnotarkammer) 2024-2026 guidance - Google Search Central blog, March 2024 spam policy update - LinkedIn Engineering blog, feed-distribution criteria 2025-2026 - Etsy seller handbook, listing-policy enforcement updates 2024-2026 Claims tracked: - OPS-037 — AI-drafted invoices and the EU VAT audit failure mode — agentmodeai.com/holding/?claim=OPS-037 - OPS-039 — AI-drafted contracts and the notary requirement in EU — agentmodeai.com/holding/?claim=OPS-039 - OPS-041 — Platform algorithm penalties on AI-generated content — agentmodeai.com/holding/?claim=OPS-041 Newsletter and the full Holding-up ledger: agentmodeai.com

Episode 3 of Agent Mode AI. Abby and Avery walk through AM-120 and OPS-038: the same continental European labour-relations surface that governs AI deployment, observed at the multinational scale and at the four-employee SMB scale. Sources cited: - Betriebsverfassungsgesetz (BetrVG) §87, Federal Republic of Germany - Wet op de ondernemingsraden (WOR) Article 27, Netherlands - Code du travail Comité Social et Économique provisions, France - FNV, DGB, IG Metall, CFDT public statements 2024-2026 - Dutch CAO database (NL Ministry of Social Affairs) - German BMAS Tarifvertrag list (federally declared) - Avv-declaration and Allgemeinverbindlich-declaration provisions Claims tracked: - AM-120 — Works councils and EU AI agent deployment — agentmodeai.com/holding/?claim=AM-120 - OPS-038 — CAO/Tarifvertrag AI-VA trap at SMB scale — agentmodeai.com/holding/?claim=OPS-038 Newsletter and the full Holding-up ledger: agentmodeai.com

Episode 2 of Agent Mode AI. Abby and Avery walk through AM-117 and AM-121: the AI Bill of Materials as the new EU AI Act Article 11 procurement artefact, and the auditability-versus-lock-in axis that defines platform-incumbent AI procurement in 2026. Sources cited: - EU AI Act Article 11, Regulation (EU) 2024/1689 - CycloneDX ML-BOM specification (OWASP Foundation) - SPDX 3.0 AI extensions (Linux Foundation) - ServiceNow Q1 FY26 10-Q (SEC EDGAR filing) - Nenshad Bardoliwalla, ServiceNow Group VP for AI Products, on the record - Charles Betz, Forrester principal analyst, ITSM/AIOps - IDC ITSM market share data, Q1 2026 Claims tracked: - AM-117 — AI Bill of Materials supply-chain disclosure — agentmodeai.com/holding/?claim=AM-117 - AM-121 — AI in IT operations reality check — agentmodeai.com/holding/?claim=AM-121 Newsletter and the full Holding-up ledger: agentmodeai.com

Episode 1 of Agent Mode AI. Abby and Matt walk through AM-116 and AM-119: directors' and officers' insurance under the Caremark line, and the reinsurance market repricing cyber treaties for 2026. Sources cited: - In re Caremark International Inc. Derivative Litigation, 698 A.2d 959 (Del. Ch. 1996) - Marchand v. Barnhill, 212 A.3d 805 (Del. 2019) - Marsh quarterly D&O market reports, 2025-2026 - Aon commercial insurance updates, 2026 - Willis Towers Watson D&O commentary, 2026 - Lloyd's of London Futureset systemic-risk programme - Munich Re Cyber Insurance Risk Report, 2024-2026 - Swiss Re Institute sigma research, 2025 - EU AI Act Article 9, Regulation (EU) 2024/1689 Claims tracked: - AM-116 — D&O insurance and the AI-supervision claim — agentmodeai.com/holding/?claim=AM-116 - AM-119 — Reinsurance market AI tail risk pricing — agentmodeai.com/holding/?claim=AM-119 Newsletter and the full Holding-up ledger: agentmodeai.com