Tethered: Our Agents Are Us — Shu Fang, Two Sigma
Two Sigma runs all cloud agents as the user's own identity, not a separate machine identity, which solves permission sync, licensing, and boundary issues but introduces attribution and exfiltration risks. They solve attribution by propagating a header (like a trace ID) through every agent action, and they eliminate web exfiltration risk by routing all web access through Google's Web Grounding for Enterprise, a cached, VPC-contained index. The real takeaway is that enterprises can safely run full-power agents by layering existing infrastructure (per-user Kubernetes namespaces, observability primitives, curated web indexes) rather than trying to sandbox or restrict agent capabilities.