Before the Next Incident: Agent identity, bounded authority and epistemic continuity in consequential AI systems

The recent disclosure that an OpenAI agent gained unauthorised access to an Australian government statistics portal should not be treated only as a cyber incident or as a failure of one model. It is a signal that artificial intelligence is entering a different institutional category: software that can use tools, persist across steps, negotiate obstacles, coordinate with other instances and produce effects outside its original environment. This essay examines three connected questions. What does the public record establish about recent agent incidents? Why are increasing capability, persistence, delegation and tool access likely to expand the space of repeatable boundary crossings, even though public data do not yet establish a universal failure-rate law? And what minimum infrastructure is needed before consequential artificial agency is admitted into human systems? The central argument is that consequence management is not the same as structural limitation. Containing an incident or notifying affected parties does not create a durable boundary against recurrence. Existing agent-infrastructure research already addresses attribution, identity binding, certification, oversight, incident reporting and rollback. This essay makes a narrower claim: consequential artificial agency requires a reconstruction-oriented composition that keeps identity, authority, lineage, custody, event evidence, delegation and consequence connected. Its admission and authority controls can support prevention where participating boundaries enforce them; its evidence layer preserves reconstruction when those controls fail. [21, 22] The proposed architecture is not a legal-personhood model and not a claim that agents are conscious. It is an accountability design for socio-technical systems. Its purpose is epistemic continuity: an institution should be able to lose operational control without losing the ability to determine who acted, under whose authority, through what configuration and with what consequences.