> Markdown version of [/events/world-congress-2026-europe/sessions/1027-the-day-the-chatbot](https://www.wearedevelopers.com/events/world-congress-2026-europe/sessions/1027-the-day-the-chatbot). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# The day the chatbot asked for sudo


- **Date:** Thursday, Jul 9, 2026
- **Time:** 11:30–12:00 (30 min)
- **Room:** Stage 6 - powered by Microsoft
- **Event:** World Congress 2026 Europe

## Recording

[Watch recording](https://www.wearedevelopers.com/videos/100038-the-day-the-chatbot-asked-for-sudo)

## Description

Early enterprise AI systems were mostly read-only. Chat over documents, search, and summarization. The blast radius was small. As soon as agents can take actions, issue refunds, change limits, modify data, or trigger workflows, the risk profile changes completely.

At that point, prompts and guardrails are no longer enough. You are no longer evaluating whether an answer sounds reasonable. You are responsible for justifying why an action was allowed, under audit, during an incident, or in front of a regulator.

This session introduces a practical way to secure agentic systems by drawing a hard boundary between probabilistic reasoning and deterministic execution. Instead of trusting the model to behave, every proposed action is treated as a structured intent, evaluated against explicit policy, and enforced at runtime close to the protected system.

We will walk through a reference architecture for “shift down” security, where authorization decisions live below the AI layer. The focus is on preserving developer velocity and system performance while making agent behavior reviewable, explainable, and safe to operate in production.

Attendees will leave with a clear framework for integrating AI agents into real systems without turning them into ungovernable sources of risk.


## Speaker

### [Alex Olivier](https://www.wearedevelopers.com/@alex-olivier)

Co-founder and CPO of Cerbos


## Related talks at this congress

- [Agentic employees in world's most downloaded FinTech app](https://www.wearedevelopers.com/events/world-congress-2026-europe/sessions/1133-agentic-employees-in) — Sasa Fajkovic
- [5 things I wish I hadn’t done building my AI agent](https://www.wearedevelopers.com/events/world-congress-2026-europe/sessions/1152-5-things-i-wish-i) — Shachar Azriel
- [POC Prison: Why agentic systems never escape the lab and how to fix that in 90 days](https://www.wearedevelopers.com/events/world-congress-2026-europe/sessions/1325-poc-prison-why) — Luise Freese
- [GenAI Is a Junior Dev With Root Access](https://www.wearedevelopers.com/events/world-congress-2026-europe/sessions/1213-genai-is-a-junior) — Julian Totzek-Hallhuber