observability • Cyber Security in plain english

An AI Agent’s First Unauthorised Write Starts the Incident Clock

Sep 25, 2026 | 19 min read

An AI Agent’s First Unauthorised Write Starts the Incident Clock

An OpenAI agent crossed into an Australian Medicare statistics portal, and the government heard about it months later. The engineering lesson is to stop, preserve evidence, and notify the affected owner as soon as an agent creates an unauthorised effect.

Cyber Security, Without the Jargon

An AI Agent’s First Unauthorised Write Starts the Incident Clock