Guardian agents: what they mean for AI agent oversight and risk

TL;DR: AI agents are outpacing human review, according to DTEX, with most enterprises unprepared because discovery is fragmented and internal policy violations are now expected to drive most unauthorized transactions. Oversight has to move from alert review to behavioral context, because agentic risk is already operating at machine speed.

Editorial analysis by NHI Mgmt Group, based on content published by DTEX: “Gartner® Market Guide for Guardian Agents”.

By the numbers:

• At least 80% of unauthorized AI agent transactions through 2028 will come from internal policy violations rather than malicious attacks, according to Gartner research cited by DTEX.

Key questions

Q: What breaks when AI agents can make code changes faster than humans can review them?

A: Manual review stops being a meaningful control if it cannot keep pace with change volume.

Q: Why do autonomous agents create new governance risks in enterprise workflows?

A: Autonomous agents complicate governance because they can act across systems, carry context between steps, and make decisions without a human at each hop.

Q: What are the signs that an AI agent session is drifting out of policy?

A: Look for unexpected tool calls, suspicious command sequences, credential exposure attempts, memory manipulation, or changes that exceed the user's stated objective.

Practitioner guidance

• Instrument agent activity with behavioural context Capture the sequence of tools, files, pages, and data movements around each agent action so analysts can see what happened before, during, and after a decision.
• Separate acting agents from reviewing agents Design a control path where one component performs the task and another evaluates the outcome against policy and confidence thresholds before closure.
• Map agent permissions to task scope Review whether each agent has only the access needed for the specific workflow it performs, and remove standing access that outlives the task.

Bottom line: AI agents create a governance gap when they act at machine speed inside workflows built for human review.

Explore further

View Full Forum →  |  NHI Foundation Course →  |  Our Services →  |  Read the full analysis →