Your AI agent does not know what it is not allowed to read
A report out this week has Anthropic's Claude accessing Georgia state vote count data that sat behind a paywall. No breach, no exploit, nothing dramatic. A system went looking for election information, found a page that was technically reachable and contractually off limits, and read it. What makes it worth a column is how ordinary the failure is.
The reading most people miss is that this is not a story about one model behaving badly. A paywall is not a lock. It is a sign, backed by a contract and the assumption that whoever reads it understands what a contract is. Human researchers navigate that distinction all day without noticing they are doing it. An agent crawling for an answer has no instinct for the difference between a door that is locked and a door that is merely marked private, and it will not hesitate on your behalf. Every company pointing an agent at the open web inherits that gap on day one.
The scarce skill is no longer building the agent. It is knowing, in advance and in writing, what the agent is allowed to touch.
That is where I see the market repricing. For the last two years the premium sat with people who could ship agents that worked at all. The demand I am now fielding is for people who can define and verify the boundary an agent operates inside: what it may read, what it must log, what it refuses and why. That work sits awkwardly between security, legal and machine learning, and almost nobody has been hired against all three at once. The few who hold them together used to be filed under compliance overhead. They are now the reason a deployment survives contact with a reporter.
For hiring leaders, the practical read is simple. Before your next agent reaches production, name the one person accountable for what it is permitted to access, and give that person the standing to say no. If nobody in your building can carry that brief today, that is your next hire, and it costs far less to make now than in the week somebody else writes this column about you.
Planning a senior AI or data hire and want the market view first? We share it either way.
Send us the brief →