On May 1, 2026, CISA, the NSA, and their counterparts in Australia, Canada, New Zealand, and the UK released "Careful Adoption of Agentic AI Services." It is the first coordinated multigovernment security guidance written specifically for agentic AI.
The lead directive: "Until security practices, evaluation methods and standards mature, organisations should assume that agentic AI systems may behave unexpectedly and plan deployments accordingly, prioritising resilience, reversibility and risk containment over efficiency gains."
Read that last clause again. Six intelligence agencies are telling enterprises to design for recovery, not correctness. Current evaluation methods cannot certify agent systems as safe, so deployments should be built to recover fast when things go wrong.