Topic starter
25/06/2026 1:28 am
TL;DR: Claude agents can move from prompt to tool use, code change, and business action fast enough that logs alone miss setup-layer risk, runtime abuse, and downstream impact, according to Zenity. Identity and access programmes now need lifecycle visibility, posture checks, and inline enforcement for agent behaviour, not just after-the-fact review.
Editorial analysis by NHI Mgmt Group, based on content published by Zenity: “Claude's Agents Are Already Running Across Your Enterprise. Now Security Teams Can Catch Up.”.
Key questions
Q: What breaks when Claude agents are governed only through logs?
A: Logs capture outcomes, but they do not capture the setup-layer decisions, tool interactions, and policy context that shaped the session.
Q: Why do Claude agents create a governance problem before runtime starts?
A: Because the risky part can already exist in MCP servers, plugins, skills, hooks, and configuration drift before the first prompt.
Q: What are the signs that an AI agent session is drifting out of policy?
A: Look for unexpected tool calls, suspicious command sequences, credential exposure attempts, memory manipulation, or changes that exceed the user's stated objective.
Practitioner guidance
- Map Claude agent inventory across all operating surfaces Catalog Claude Code, Cowork, and Chat instances together with connected MCP servers, skills, plugins, hooks, and local configurations so governance sees the full agent estate.
- Enforce pre-session posture checks Block or review sessions when configuration drift, risky extensions, embedded secrets, or suspicious payloads appear in the setup layer before the agent begins work.
- Correlate agent sessions to code and business changes Tie prompts, tool use, pull requests, commits, and downstream actions into a single audit trail so investigators can reconstruct how an AI-assisted change was produced.
Bottom line: Claude agent governance now depends on seeing the setup layer, runtime sequence, and downstream change as one control surface.
Explore further
View Full Forum → | NHI Foundation Course → | Our Services → | Read the full analysis →
25/06/2026 10:55 am
Claude governance is now a lifecycle problem, not a logging problem. The article makes clear that security teams cannot wait until after a PR, commit, or business action to understand agent behaviour. Claude Code, Cowork, and Chat each produce different evidence, but the governance model has to cover setup, runtime, and execution as one continuous identity surface. The practitioner conclusion is simple: if the control only sees outcomes, it is already too late.
A few things that frame the scale:
- Claude Code-assisted commits leaked secrets at a rate of 3.2%, more than double the human-only baseline of 1.5%, with peaks reaching 31 secrets per 1,000 commits in August 2025, according to the State of Secrets Sprawl 2026.
- Only 5.7% of organisations have full visibility into their service accounts, according to the Ultimate Guide to NHIs.
A question worth separating out:
Q: How should security teams prove accountability for AI-assisted code changes?
A: They need a trace from prompt to tool use to pull request and commit, with enough context to show which agent actions influenced the final change. That gives security, compliance, and engineering teams a defensible audit trail for review and incident response. Without that linkage, the code change is visible but its provenance is not.
👉 Read our full editorial: Claude agent governance now needs lifecycle visibility and runtime control