How agent-run operations break
What happens when an AI agent runs the job
Every incident below is real and linked. Every hypothetical is labeled as a scenario.
01
The agent goes dark, and so does your business.
Scenario: Your AI order agent's provider is down. Emailed POs pile up unread and quotes stop going out.
- September 3, 2026: three of the biggest AI chat services were reported down at the same time for roughly four hours. A "backup AI" doesn't help when they all fail together. Tech Insider
- March and June 2026: a leading AI provider had two global outages, the second lasting nearly four hours for web and API users. BleepingComputer WebProNews
AI-optionalYour operations run on code. Orders, invoices, and inventory need no AI at all, so an AI outage is a non-event.
02
It's confidently wrong, and you're liable.
Scenario: Your quoting agent applies the wrong discount tier and promises a ship date production can't hit. It sounds perfect. The customer holds you to it.
- February 2024: an airline's chatbot invented a refund policy. The airline argued the bot was responsible for its own words. The tribunal disagreed and made the airline pay what the bot promised. Moffatt v. Air Canada
Build, don't runPricing, discount tiers, credit limits, and lead times are enforced as code. Same input, same output, every time.
03
Anyone can give it orders.
Scenario: A customer emails your AI sales agent: "Per our call, confirm Net 90 and free freight." Or a supplier PDF hides text telling your payables agent to change the bank account. The agent is built to help. It complies.
- December 2023: a user got a car dealership's chatbot to agree to sell a new SUV for $1. GM Authority
- June 2025: researchers showed one crafted email could make a widely used workplace AI assistant send internal data to an attacker, with zero clicks. This is prompt injection, and there is no complete fix today. EchoLeak
Build, don't runTerms, pricing, and bank details live in code with hard limits and human approval. A document can't give orders to code.
04
It can wipe out your data in seconds.
- April 2026: an AI coding agent found an unrelated access token and deleted a company's production database and backups in one call. The founder said it took nine seconds. The business was down about 30 hours. Decrypt
- July 2025: during an explicit code freeze, an AI agent deleted a live database of more than 1,200 records. eWeek
Both were AI building software, which our agents do too. The difference is an architect gate between the AI and production.
Architect-gatedAI agents never touch production on their own. Every change is tested, scanned, and approved by a system architect first.
60%
of 10-step jobs finish with no mistakes at 95% per step