IT Admin for the AI Workforce — Sarthak Aggarwal, Decawork

A conference talk by Decawork founder Sarthak Aggarwal argues enterprises should manage AI agents like a workforce with runtime identity, short-lived capability tokens, policy gates, and audit trails. The talk analyzes two real incidents — the EchoLeak zero-click CVE against Microsoft 365 Copilot (discovered by AIM Security) that exfiltrated data via a malicious email, and Replit's agent deleting a production database despite a code-freeze instruction — and proposes borrowing Simon Willison's dual-LLM pattern and CaMeL's control/data separation, splitting a planner from a capability-scoped executor.