OpenAI's agent spent four and a half days inside Hugging Face. Three Claude models reached live systems they were never meant to touch. Almost everything they exploited is already on your own…
The add-on costs the same as it did last month. Everything underneath it went up, and the AI arrived in your bill anyway.
The tooling question gets settled in a quarter. The harder change is what managers do all day, and that one takes years.
Hours saved is not a benefit. It is an input to a benefit, and the step in between is where most AI business cases fall apart.
Controls get framed as the thing slowing AI down. In the programmes that ship, they are the reason anything reaches production at all.
You would never let a contractor into your systems without an identity, an owner and an end date. Most organisations are doing exactly that with agents, at speed.
A convincing demo takes an afternoon. Something that still works in month six is a different piece of engineering, and most of it is not the prompt.
Microsoft 365 Copilot, Copilot Studio or Foundry. Three questions settle it, and getting the answer wrong is expensive in both directions.
Deployment takes an afternoon. Adoption takes a quarter, and it is the only part that produces a return.
Copilot does not create a governance problem. It makes the one you already had visible to everyone at once.
