The problem
An agent does not wait for you. By the time you blink, it has already done twenty things you told it not to. That is not a failure of instruction; it is a failure of tempo. The act propagates at machine speed, and supervision — a human reading along, ready to say hold on — runs at human speed. "Hold on" was never an available control. By the time it is spoken, it is archaeology.
So the honest question was never how do we watch the agent? It is: what stands in front of it, and what can we prove afterward?
What the industry built instead
Watching. The industry built watching, in two kinds.
The first kind is first-party: the lab's own logs. The actor keeps the record of its own acts — editable, in-house, produced after the fact by the party with the most reason to shape it. The agent, in effect, grades its own homework and files the report card itself.
The second kind is external but observation-only: the observability platforms, the tracing tools, the dashboards. A third party watches the agent work and shows you the footage. This is better than nothing and worse than it looks, because of what the footage actually is. The camera does not give you a seal. The camera just shows you what it said. A transcript is a claim about the past, written down by systems the past's owner controls. It can be re-cut after the lawyers arrive, and there is no way to prove it wasn't.
Neither kind ever stands in the path. Neither renders a verdict before the act. Neither signs anything at the moment of decision.
The camera goes next to the gate
Physical security solved this problem centuries ago, and solved it so completely that everyone already knows the answer in their own driveway. The difference between a camera and a gate is that you put the camera next to the gate. The camera's job is to watch the checkpoint. The gate's job is to be the checkpoint — the thing that opens, refuses, and holds, and whose log of openings and refusals is the record of the estate.
Which raises the question their architecture cannot answer: what did you even put the camera on? A camera mounts on the perimeter — on the fence, on the gatepost — because the perimeter is the line worth watching. Take the fence and the gate away and the camera has nothing to be for. It ends up screwed to the mansion wall, covering open lawn: hours of footage, in perfect fidelity, of a space where nothing was ever going to be stopped.
The same is true here. Observing an agent means something only when there is a checkpoint for the observation to observe — a point where proposals arrive, are judged, and leave a record either way. Without the checkpoint, the trace is just footage of an open driveway.
The camera goes next to the gate. There has to be a gate.
A mansion with cameras and no gate is not secured. It is documented. Everything that happens there will be available in high resolution, afterward, to whoever is left to review it.
The agent industry built the mansion — the largest, most expensive estates in the history of computing — and installed cameras on every wall. The driveway is open. And here is the ironic part, the part that tells you the knowledge was never missing: the people who run these companies go home at night to houses with gates, and cameras on the gates. They bought the correct architecture for the building they sleep in. They shipped its absence to everyone else.
And the mansion is rented. The position is leased — rented compute, rented attention, paper wealth — and still they forgot the one fixture every real mansion has.
What a gate is
A gate, for an agent, is an external party that stands between proposal and execution and renders a binding verdict — allow, escalate, veto — before the act, by rules fixed in advance, and seals that verdict at the moment of decision: the proposal, the rule applied, the decision, signed and chained to every verdict before it, so the record cannot be silently rewritten later.
The seal is the difference. A sealed record was closed before anyone knew they would need it. It is not the actor's account of itself. It is a non-actor's contemporaneous proof of what was proposed and what was decided. In the language of evidence: the camera produces testimony. The gate produces exhibits.
Why it decides the case
When an agent does something costly, the litigation that follows collapses, in the end, to one question: were you reckless? Recklessness is conscious disregard — you saw the risk and ran it anyway. Almost everything else is argument.
A sealed gate record answers that question in the negative, at the moment it is asked: no — look, we kept records. Here is the proposal as it arrived. Here is the rule that governed it. Here is the verdict, and here is the signature, and here is the chain it hangs from, unbroken back to the first record. The defendant who holds that exhibit was not asleep and cannot be pled as reckless against their own receipts. The defendant with camera footage has a story about a system nobody was actually controlling, told at the speed nobody could have answered.
The harm propagates at machine speed. The defense has to be built at machine speed too — before the act, not reconstructed after it.
What this is not
- It is not a claim that records prevent harm. A gate stops what its rules catch; wrong rules are the rule-writer's fault, and no seal launders a bad decision into a good one.
- It is not an argument against cameras. Observation has a real job: reconstruction, debugging, pattern-finding. The argument is about where the camera goes. It goes next to the gate.
- It is not a claim that watching is worthless because it is sold by the labs. First-party logs are fine as telemetry. They fail as evidence, which is a different standard and the one that eventually gets applied.
The claim
Agent governance has the architecture backwards. It built observation where it needed adjudication, and transcripts where it needed seals. What the deployment actually requires is older than computing: an external gate that judges each proposed act before it executes, and a sealed record, kept by a non-actor, that survives the arrival of the lawyers.
The camera goes next to the gate. There has to be a gate.
They rented the mansion and never bought the gate.
Take care of your people. Don't build for everyone.