John, you're nodding.

Well, yeah, it makes you wonder.

I mean, if you really were trying to have a sandbox environment, would it not be air gapped when there's possibilities of things like this happening? Kinda makes you wonder about the intent of the exercise in itself.

I mean, we've been talking a lot in the last few months about intent with regard to AI agents and how can that be represented, you know, in code or in configuration.

I think this is a, a really good example of why we need to understand what the intent is, and sometimes even if an intent is declared, uh, it could be contrary to what the human behind it actually means.

The point is, it has to live close to your actual sensitive resources.

So question I have is what does this mean for software vendors that are trying to leverage frontier models in their own products? Like we have been diving a little deeper in our questions around how are cybersecurity and IM products using generative AI, and if you're using commercial model, what does this tell us? What does this incident tell us about the effectiveness of doing that? And I guess my, my follow on to that is, if you're locked out from being able to conduct the type of analysis you need to do to be able to bring value to your clients, then is this sort of barking up the wrong tree?

John, you're nodding.

Well, yeah, it makes you wonder.

I mean, if you really were trying to have a sandbox environment, would it not be air-gapped when there's possibilities of things like this happening? Kind of makes you wonder about the intent of the exercise in itself.

I mean, we've been talking a lot in the last few months about intent with regard to AI agents and how can that be represented in code or in configuration.

I think this is a really good example of why we need to understand what the intent is.

And sometimes even if an intent is declared, It could be contrary to what the human behind it actually

The point is, it has to live close to your actual sensitive resources.

So question I have is, what does this mean for software vendors that are trying to leverage frontier models in their own products? Like, we have been diving a little deeper in our questions around how are cybersecurity and IAM products using generative AI? And if you're using commercial model, what does this tell us? What does this incident tell us about the effectiveness of doing that? And I guess my follow on to that is if you're locked out from being able to conduct the type of analysis you need to do to be able to bring value to your clients, then is this sort of barking up the wrong tree?

Since I had a look at that earlier, how mature are they actually? How good are they? I

think you find a wide range of capabilities and I'm sure most of it's driven by the customers of these B2B IAM solution providers and what they have requested.

So yeah, you know, you're right.

I think it's difficult to actually pin down one, two, or even three different kinds of models because if you think about all the different kinds of B2B interactions that are out there.

You may have, let's start with the most complex one, a big supply chain where you have, let's say, I call it a prime with many suppliers and then also many customers.

And maybe different kinds of contractors that work.

So you could have hundreds or in some cases even thousands of organizational entities that need to be provisioned with identities so that those identities can then be assigned entitlements, permissions to be able to get into shared workspaces of different kinds.

There are more aspects to look into.

Since I had a look at that earlier, how mature are they actually? How good are they?

I think you find a wide range of capabilities and I'm sure most of it's driven by the customers of these B2B IAM solution providers and what they have requested.

So yeah, you know, you're right.

I think it's difficult to actually pin down one, two, or even three different kinds of models because if you think about all the different kinds of B2B interactions that are out there.

You may have, let's start with the most complex one, a big supply chain where you have, let's say, I'll call it a prime with many suppliers and then also many customers.

And maybe different kinds of contractors that work.

So you could have hundreds or in some cases even thousands of organizational entities that need to be provisioned with identities so that those identities can then be assigned entitlements, permissions to be able to get into shared workspaces of different kinds.

There are more aspects to look into.