Agent containment just became a government problem, not a vendor problem

AI technology categories in Beijing's draft export catalogue

From large AI models and intelligent agents to chip design methodologies and computing cluster architectures — the scope touches nearly every layer of the modern AI stack. Source.

The agent-containment story stopped being a vendor PR cycle this week and became three different kinds of policy artifact: a national CERT disclosure, a bilateral export regime, and a bank-industry protocol. Each is a different jurisdiction answering the same question — who is accountable when an autonomous system exceeds its brief — and each produces a different answer. The common thread is that "the vendor will tell us" is no longer a defensible control. Watch whether the EU AI Office or UK FCA publishes something analogous to CERT-In's note within 30 days; if they do, agent-incident disclosure becomes a global supervisory expectation before year-end. Considered and passed: the GE Appliances / Tata Steel 800-agent deployment counts (single thin-tier source, vendor-supplied metrics) and the UK FCA AI-supervision plan (announced intent, no mandate or timeline).

— Agentic desk