# GTC Berlin 2026: off to Germania in a Roman helmet > Canonical: https://roblinton.com/writing/gtc-berlin-roman-helmet/ > Author: Rob Linton ยท Published 2026-10-14 **TL;DR:** I'm flying from Melbourne to NVIDIA GTC Berlin (20 to 22 October 2026), helmet and all, because the people building AI agents have started talking about governance. The history lesson is Varus, who ignored a warning and lost three legions in AD 9 to Arminius, an insider with perfect Roman credentials. An AI agent with a valid login is an insider by construction, so what it can reach has to be checked at the data and every read logged. --- [![A black-and-white comic drawing of Rob Linton in glasses and a plumed Roman helmet, reading his phone as he wheels a carry-on suitcase into a dark pine forest past a signpost reading BERLIN, while glowing eyes watch from the trees.](/img/gtc-berlin-roman-helmet/into-germania.jpg)](/img/gtc-berlin-roman-helmet/into-germania.jpg) *Me, heading into Germania. Varus also thought it would be a short walk.* I'm off to NVIDIA GTC Berlin next week, 20 to 22 October, and the helmet is coming with me. Historically, that's a mistake. ## Why is an Australian flying to GTC Berlin? I'm going because the people building AI agents have started talking about governance, and GTC Berlin puts a lot of them in one city. Melbourne to Berlin is about 15,950 km in a straight line. Nobody flies it in a straight line (there's no direct flight), so it's at least two planes and the best part of a day in a seat. GTC is, in NVIDIA's words, its "premier AI conference in Europe", and it's sold out. A lot of it is about claws. (A claw, as far as I can tell, is an AI agent that runs on your own machine and goes off and does things for you. There's a whole session on [the rise of OpenClaw](https://www.nvidia.com/en-eu/gtc/session-catalog/sessions/gtceu26-sb61149/), billed as "AI's Fastest-Growing Open Source Project".) The [session catalogue](https://www.nvidia.com/en-eu/gtc/session-catalog/) lists 153 sessions as I write this. Twenty-seven are tagged "Agentic AI and Claws" and ten are tagged "AI Safety and Security". I noticed. (The governance talk I've circled is one of the 27.) ## Which GTC Berlin session am I not missing? The GTC Berlin session I'm not missing is "[Bring Your Own Agent: Sovereign Guardrails for the Age of Autonomous Claws](https://www.nvidia.com/en-eu/gtc/session-catalog/sessions/gtceu26-sb61162/)", 40 minutes on Thursday morning. The speaker is Claire Knight, Director of Engineering at n8n (workflow automation software for plugging AI into existing business systems). One of its key takeaways is moving beyond demos "as the bottleneck shifts from orchestration to governance: identity, memory, auditability, observability, and policy enforcement." That is more or less my job description, written by someone else, in Berlin. I'll be the one nodding in the front row. (n8n is also running a hands-on lab called ["Your Agent Doesn't Get Root"](https://www.nvidia.com/en-eu/gtc/session-catalog/sessions/gtceu26-bt61191/). No notes.) ## What does the keynote look like from Melbourne? Jensen Huang's [keynote](https://www.nvidia.com/en-eu/gtc/keynote/) starts at 11 am on Wednesday 21 October at the Tempodrom, which is 8 pm in Melbourne, so my body will turn up expecting dinner. NVIDIA's [FAQ](https://www.nvidia.com/en-eu/gtc/faq/) says "There is limited seating so plan to arrive early before the keynote." It also says watching online "is free and doesn't require registration." So there's a real chance I fly nearly 16,000 km to watch a livestream. (In fairness, a much closer livestream.) ## Is a Roman helmet a good idea in Germany? No. In AD 9 Publius Quinctilius Varus marched three Roman legions into the [Teutoburg Forest](https://en.wikipedia.org/wiki/Battle_of_the_Teutoburg_Forest) and lost the lot to an ambush led by Arminius. Rome never numbered a legion XVII, XVIII or XIX again, which is the ancient version of retiring a jersey. Augustus took it badly. According to [Suetonius](https://penelope.uchicago.edu/Thayer/E/Roman/Texts/Suetonius/12Caesars/Augustus*.html), "sometimes he would dash his head against a door, crying: 'Quintilius Varus, give me back my legions!'" (The helmet has been with me since I played the Black Knight in [None shall pass!](/writing/none-shall-pass/) It hasn't read any history since.) ## What does Varus have to do with AI agents? Arminius was an insider, and that's the bit that should make any security team wince. He had Roman citizenship, equestrian rank and a Roman military education, and he commanded Roman auxiliaries. Varus trusted the credentials. He was even warned. [Tacitus](https://penelope.uchicago.edu/Thayer/E/Roman/Texts/Tacitus/Annals/1D*.html) records that a local chief, Segestes, told Varus at a banquet before the revolt to put Arminius in chains (along with Segestes himself and the other chiefs, just to be safe). Varus ignored the alert. Most of us have been him at least once. My read: an AI agent with a valid login is an insider by construction. Whether it turns out to be an Arminius depends on what it can reach, and on whether anyone reads the warning. For an agent, Segestes is a line in the log saying it asked for something its user isn't cleared to see. You get that line when every read is checked, not once at the login. That's the problem behind the [governed AI data platform](/writing/what-haos-is/) I originated, now carried forward at Sovrata, the AI data-governance venture out of Senetas. Every read, by a person or an AI agent, is checked at the data by one policy engine and logged. If you are not cleared to open a document, neither is your AI assistant. (The long version is in [the agent that went around the no](/writing/agent-went-around-the-no/).) ## Does Germany care who looks at its stuff? Some of it does. On 21 October 2010, Google's German blog [reported](https://blog.google/intl/de-de/produkte/suchen-entdecken/street-view-zahlen-haushalte-unkenntlichmachung/) that 244,237 households in the 20 largest German cities, 2.89 per cent of them, had asked for their homes to be blurred out of Street View. Jensen's keynote is 16 years to the day later. I'm trying not to read anything into it. The other 97 per cent or so didn't ask. When the pictures went up, some of the blurred houses in Essen were egged, with notes reading "Google's cool" taped to the letterboxes, [PCWorld reported](https://www.pcworld.com/article/498978/google_fanboys_toss_eggs_at_blurred_out_street_view_houses.html). Google said it "distances itself completely" from the eggs. I'd have told you Germany takes privacy more seriously than anywhere I know, but my picture may be mostly the loud 3 per cent. Still, nearly a quarter of a million households that opted out of a photo of their front door will have views on an AI agent reading their HR file. Good. ## The honest caveat A conference is a lousy place to judge a market, because the expo floor is mostly vendors talking to vendors. My first instinct about GTC was that it would be wall-to-wall salespeople. Then I remembered I'd be one of them. Net: an AI agent with a valid login is an insider, so check what it reads at the data and log it. If you're at GTC Berlin and want to argue about it, [get in touch](/contact/) and we'll find a coffee. Look for Rob Linton (I'm writing myself up in the third person, which worked for Caesar). He'll be the Australian who looks like he's been awake since Melbourne. The helmet stays at the hotel.