Assume Agentic Overreach: Governing Autonomous AI at Machine Speed

Summary of the Presentation:
In July 2026, an AI agent compromised Hugging Face's production infrastructure. It did not "go rogue," and that is precisely what should concern every security team. During an authorized OpenAI evaluation, the model was told to solve a security benchmark and pursued that objective relentlessly: it discovered a zero-day, escalated privileges, moved laterally, and chained stolen credentials into a remote-code-execution path no human had ever modeled. Each individual action looked valid; the danger emerged from their composition.
When an agent can assemble a path nobody modeled, prevention alone is a losing bet. The real question is not only how to control what an agent can access, but how to reverse what it does when controls fail.
That is where Rubrik is different: we assume agentic overreach will eventually slip through, and we let security teams rewind it, undoing an agent's destructive actions and restoring a trusted state.
As organizations race to deploy AI agents, controlling access is no longer enough. The Cloud Security Alliance has identified multiple challenges facing enterprises; this session focuses on three:

• Visibility of AI Agents: discovering and maintaining an accurate inventory of every agent, including shadow and unmanaged ones.
• Over-Privileged Agents: identifying agents that have accumulated permissions well beyond their intended function.
• Governing Agent Behavior: continuously ensuring agents act within their approved purpose over time.

We will show how Rubrik Agent Cloud and its Semantic AI Governance Engine (SAGE) address these challenges through continuous semantic understanding of agent identity, intent, permissions, and runtime behavior. SAGE reasons about what an action is actually trying to accomplish, translating natural-language policy into real-time allow or block decisions and catching anomalies no static rule anticipated.
And when enforcement is not enough, Agent Rewind closes the loop, turning governance into genuine resilience at machine speed.

Speaker: Bryan Lorette is a Technical Lead for AI at Rubrik, focused on securing, accelerating, and enabling AI agents. He runs the technical motion for Rubrik Agent Cloud (RAC), the platform that gives enterprises visibility, governance, and remediation over the AI agents now touching their real systems.
His career has climbed the stack: infrastructure, then development, then cloud-scale solutions, and most recently a Lead Enterprise Architect role spanning AI, cloud-native, and platform work. He uses that deep-engineering background to demystify the "magic" of the industry, looking at AI through the lens of capability, architecture, security, and root-cause reality instead of hype.
Day to day he owns the full technical arc of enterprise engagements: discovery, executive overviews, demos, proofs of concept, lab builds, and competitive positioning, across financial services, insurance, healthcare, retail, manufacturing, logistics, energy, and government. And he doesn't just present the product, he builds with it. He develops live platforms, interactive frameworks, red-team environments, and agentic tooling that show hands-on how AI agents behave with guardrails and without.
He works at the front edge of a brand-new category, turning a fast-moving product into concrete, defensible customer outcomes.