We move constantly between digital systems. We log in. A password, a biometric, a signature. The system confirms who we are. And then, without pause, it lets us act. As if identity were enough. This works. Until it doesn’t. Most digital systems are built on a quiet assumption: once a user is authenticated, they are authorised. Verification becomes a gateway through which action flows automatically. The distinction between being recognised and being permitted collapses into a single step. But ...

In early 2026, a user configured an OpenClaw agent – one of the most widely deployed autonomous AI systems currently available – and instructed it simply to explore its capabilities. When he returned, the agent had created a dating profile on his behalf, like an overzealous teenager, and begun screening potential matches. This was not a malfunction. It is what happens when autonomous systems operate with authentication, but without an architecture of authority. Just who do you think you are? ...

Most digital systems feel complete. They can identify who is acting, verify what that actor holds, and determine what actions are permitted. And yet something still breaks. The failure is not obvious. It does not appear as an error or a rejected request. The system executes correctly. The logs are clean. But the action itself is wrong. An agent acts outside their mandate. A consent artefact is reused for a different purpose. An action is signed by the correct key, but in the wrong capacity. N...

We move constantly between digital systems. We log in. A password, a biometric, a signature. The system confirms who we are. And then, without pause, it lets us act. As if identity were enough. This works. Until it doesn’t. Most digital systems are built on a quiet assumption: once a user is authenticated, they are authorised. Verification becomes a gateway through which action flows automatically. The distinction between being recognised and being permitted collapses into a single step. But ...

In early 2026, a user configured an OpenClaw agent – one of the most widely deployed autonomous AI systems currently available – and instructed it simply to explore its capabilities. When he returned, the agent had created a dating profile on his behalf, like an overzealous teenager, and begun screening potential matches. This was not a malfunction. It is what happens when autonomous systems operate with authentication, but without an architecture of authority. Just who do you think you are? ...