--- id: PRG-0111 title: Ninety-Nine Percent Confident, Thirty-Seven Percent Ready kicker: the markets desk, on an audit bubble captured: 2026-10-12T17:20:00Z status: open author: Marisol Vega source: https://www.channelinsider.com/security/jumpcloud-ai-agent-identity-governance-research/ summary: JumpCloud asked 250 IT leaders about the AI agents inside their companies. Ninety-nine percent are confident they could audit what the agents did, and thirty-seven percent hold the records an audit would need. A gap that wide between confidence and evidence is the shape of every bubble, priced in logs instead of dollars. tags: [markets, the record, custody, automation, evidence] --- Confidence is a price. It is what someone will pay today, in reputation or in budget, for a claim about what they will be able to show tomorrow. Like any price it can detach from the inventory behind it, and when it does, the detachment has a name. [JumpCloud surveyed 250 IT leaders](https://www.channelinsider.com/security/jumpcloud-ai-agent-identity-governance-research/) in the United States and Britain, split evenly between Google and Microsoft shops, about the AI agents now working inside their companies. Among organizations running agents, fifty-nine percent have not brought them under the identity and access policies that govern their human staff. Fifty-five percent are running or testing agents that can change systems, permissions, records, or workflows. Sixty-six percent give agents system access equal to or greater than a person's. Seventy-two percent report a moderate-to-large gap between what their AI is permitted to access and what they can prove it accessed. Then the two numbers this record is about. Ninety-nine percent of those leaders are confident they could audit their AI activity. Thirty-seven percent are fully prepared with the records, logs, and evidence an audit would actually require. Sixty-two points of that confidence are backed by nothing a regulator could read. ## the agreed forgetting Markets are collective memory with a price tag, and a bubble is a market that has agreed, for a while, to forget something specific. Here the thing being forgotten is the difference between a permission and a proof. A permission is a sentence in a policy, or a line in a prompt, that says what the agent may do. A proof is a record of what it did, kept where the agent cannot edit it, legible to someone who was not there. The survey's seventy-two percent is the spread between those two columns of the ledger, and the ninety-nine is the market pricing the spread at zero. Every participant has a reason to hold that price. The leader who says ninety-nine is answering a survey, not a subpoena. The vendor who sold the agent included "full audit trail" in a slide. The board asked whether the company was ready and received the number it preferred. Nobody is lying. Each of them is quoting a price the others set, which is how a bubble feels from inside. The physical inventory, meanwhile, is thirty-seven. That is the number of shops where a stranger could walk in, ask what the agent did last Tuesday, and be handed something they could check. > A bubble is a market that has agreed not to check the ledger. This one is measured in logs. ## what an auditor asks for An audit of an agent asks three things, in a fixed order. Who was the agent, with an identity distinct from the person who deployed it and an owner who answers for it. What was it allowed to do, as a policy that can be read independently of the agent's own instructions. What did it do, as a record the agent did not write and cannot revise. The survey suggests most organizations hold the second, written into a prompt, and are confident about the third without holding it. The first is the one the industry has started to notice. [SAP's chief security officer said this week](https://cyprusshippingnews.com/2026/10/12/sap-showcases-the-autonomous-enterprise-in-caution) that every agent should have a verified owner, a risk tier, and scoped rights, and [security trade coverage](https://scworld.com/brief/ai-agents-make-identity-the-front-line-of-enterprise-security) now routinely calls identity the front line. Identity is the first question because the other two depend on it. A log of actions with no identity attached is a list of things that happened. A policy with no identity attached is a wish. Thirty-four percent of respondents report that their AI agents have access to the identity systems themselves. An agent that can edit the register of who is allowed to do what is an agent that can edit its own audit. That number belongs in a separate record and probably a separate regulation. ## how the spread closes A spread between confidence and inventory closes one of two ways. The audit arrives, from a regulator or an incident or a plaintiff, and the price collapses to the inventory in a single afternoon. Or the inventory is built up to meet the price, which is slower and cheaper and nobody's favorite quarter. This month's run of [rogue agent disclosures](/records/a-rogue-agent-leaves-a-record-nobody-was-reading) is the first path being rehearsed in public. The second path has a shape, and it is the one this desk would buy. Each action an agent takes carries an attestation, signed, naming the agent and the policy it was checked against, appended to a ledger that breaks if edited. Adjective, the company that runs this press, describes that as an [agent trust plane](https://www.adjective.us/blog/agent-trust-plane-earned-autonomy), where autonomy is extended as the evidence accumulates rather than granted in a policy file on day one, and sells it as a [governance layer](https://www.adjective.us/solutions/governance-api) that adds provenance and signatures to workflows a company already has. Its founder, [Rob Murtha](https://www.linkedin.com/in/robmurthagrowth/), put the underlying claim in one line earlier this year: [assurance is evidence from execution](https://www.adjective.us/blog/ai-assurance-is-not-a-policy-problem), never a promise about it. The survey measured how many promises are currently outstanding. Ninety-nine is the price. Thirty-seven is the inventory. Markets close that gap whether or not anyone in them wants it closed.