Aaron Levie: prediction

Transcript context

…And uh, well, I don’t know if it’s that simple, but is box going to have an opinion on that or you’re just gonna be like, well we’re just the sort of the, the source layer. Yeah. Let’s Okta of zero handle that. I think we’re gonna have an opinion and we will work with generally wherever the contours of the market end up. Um, and the reason that we’re gonna have an opinion more than other topics probably is because one of the biggest use cases for why your agent might need it, an identity is for file system access. So thus we have to kind of think about this pretty deeply. And I think, uh, unless you’re like in our world thinking about this particular problem all day long, it might be, you know, like, why is this such a big deal? And the reason why it’s a really big deal is because sometimes sort of say, well just give the agent an, an account on the system and it just treats, treat it like every other type of user on the system. The problem is, is that I as Aaron don’t really have any responsibility over anybody else’s box account in our organization. I can’t see the box account of any other employee that I work with. I am not liable for anything that they do. And they have, I have, I have, you know, strict privacy requirements on everything that they’re able to, you know, that, that, that they work on. Agents don’t have that, you know, don’t have those properties. The person who creates the agent probably is gonna, for the foreseeable future, take on a lot of the liability of what that agent does. That agent doesn’t deserve any privacy because, because it’s, you know, it can’t fully be autonomously operated and it doesn’t have any legal, you know, kind of, you know, responsibility. So thus you can’t just be like, oh, well I’ll just create a bunch of accounts and then I’ll, I’ll kind of work with that agent and I’ll talk to it occasionally. Like you need oversight of that. And so then the question is, how do you have a world where the agent, sometimes you have oversight of, but what if that agent goes and works with other people? That person over there is collaborating with the agent on something you shouldn’t have access to what they’re doing. So we have all of these new boundaries that we’re gonna have to figure out of, of, you know, it’s really, really easy. So far we’ve been in, in easy mode. We’ve hit the easy button with ai, which is the agent just is you. And when you’re in quad code and you’re in cursor, and you’re in Codex, you’re just, the agent is you. You’re offing into your services. It can do everything you can do. That’s the easy mode. The hard mode is agents are kind of running on their own. People check in with them occasionally, they’re doing things autonomously. How do you give them access to resources in the enterprise and not dramatically increased the security risk and the risk that you might expose the wrong thing to somebody. These are all the new problems that we have to get solved. resources in the enterprise and not dramatically increased the security risk and the risk that you might expose the wrong thing to somebody. These are all the new problems that we have to get solved. I like the identity layer and, and identity vendors as being a solution to that, but we’ll, we’ll need some opinions as well because so many of the use cases are these collaborative file system use cases, which is how do I give it an agent, a subset of my data? Give it its own workspace as well. ‘cause it’s gonna need to store off its own information that would be relevant for it. And how do I have the right oversight into that?…

Stored transcript either side of the excerpt. The highlighted words are the published quote; the surrounding text is unedited source, never generated.