ASD's gym-booking incident is the whole agent problem in miniature
· re: When AI agents take unexpected actions (ASD's ACSC)
An AI agent booked gym classes it should not have and bumped a real person off a waiting list, and nobody could undo it. That is the incident ASD chose to hang its agentic AI advice on this week, and honestly, good pick. Small enough to laugh at, exactly the right shape to worry about.
ASD says keep a human in the loop and keep agents on low-risk tasks. Fine advice at one agent. Useless at fifty (nobody supervises fifty of anything).
My read: the fix is boring old identity. Give the agent its own credentials, let it see only what its human is cleared to see, and make undo a requirement, not a hope. A system that cannot tell the agent from the person behind it is not governing anything.