Skip to main content

The Agentic AI Mirage: Why Your 'Personalized' Assistant is Working for the Vendor, Not You

The Ghost of Cluetrain

In 1999, the Cluetrain Manifesto famously declared that "markets are conversations." It was an inspiring, romantic notion that promised to democratize commerce, wresting power from faceless corporate monoliths and handing it back to a sovereign consumer. Fast forward to today, and that conversation has been thoroughly co-opted. What was supposed to be a bilateral dialogue has devolved into an automated, highly-optimized monologue. The emergence of agentic AI, which features autonomous software agents supposedly operating on our behalf, promises a return to that original democratic vision. But let us be honest: is this actually a revolutionary shift, or is it just another iteration of vendor-controlled slop designed to monetize our decisions before we even make them?

The dream of conversational commerce was simple: technology enables humans to speak to other humans at scale. Instead, the vendor community realized that humans are expensive, inconsistent, and prone to demanding fair treatment. The corporate response was to replace them with IVR systems, chatbots, and automated messaging. These tools were never designed to foster actual conversations; they were designed to create efficient deflection barriers. Now, we are told that generative AI and agentic systems will change all this by acting as our personal proxies. But will it come true?

TL;DR

If you want to watch the full CRMKonvo, please go ahead here (optimized for smartphones) or here (optimized for tablets/computers).


Else, be my guest and continue to read.

Or do both …

The Illusion of Agentic Agency

During our recent CRMKonvo with Dan Miller, founder of Opus Research, we wrestled with this paradox. We have been apocaloptimists when it comes to conversational AI, marveling at the technology's ability to improve our lives while ignoring its potential as a tool for corporate surveillance. The simple truth is that the economic incentives of surveillance capitalism remain unchanged. When a vendor provides you with an "autonomous assistant" to help you shop, that assistant is not working for you; it is a digital Trojan horse. It is programmed to maximize the vendor's margins, steer you toward high-commission partners, and dynamically adjust prices based on your historical data. They call it serving you better; in reality, it is just more sophisticated extraction.

This is where the asymmetry of power becomes glaringly obvious. The consumer enters the arena with a simple objective: to find a quality product at a fair price. The vendor enters with predictive algorithms, historical CDPs, and agentic bots designed to extract the maximum possible lifetime value from that specific consumer. When these two forces meet, it is not a conversation; it is a “negotiation” where one party has access to the other's entire cognitive blueprint. If your personal shopping agent is hosted, managed, or trained by the same corporate infrastructure it is supposed to negotiate against, your agent is effectively a double agent.

The Guardrail Paradox and the Friction of Safety

One of the most fascinating aspects of our discussion centered on the concept of guardrails. In theory, guardrails are designed to protect users, prevent systemic bias, and ensure compliance. In practice, they are a friction point. If you are a malicious actor, or a vendor looking to maximize short-term profit, you do not want guardrails; building and maintaining them requires computational and human effort. Consequently, the path of least resistance is to deploy systems with minimal oversight and dealing with the possible fallout later. When they put restrictions in place, they often reduce legitimate user choices instead of protecting the user.

This creates a bizarre scenario where the consumer is locked in a digital playpen, restricted by strict guardrails on what their agent can ask or do, while the vendor's algorithms roam free in the wild west of data exploitation. The guardrail paradox is that by trying to make AI safe, we often make it useless for the consumer while doing absolutely nothing to stop the vendors from using unbridled models to leverage market dynamics. It is an asymmetric conflict: the defensive side must comply with every rule, which are set by the offensive side.

The 'Trusted Agent' in a Corporate State

Senator Warner and others have proposed regulatory frameworks that would authorize approved entities, be they banks, credit card issuers, or the vendors themselves, to host "trusted user agents." This is a farce of epic proportions. How can anyone believe that a vendor-hosted agent will prioritize the consumer's interests? The Martech community has spent decades building systems to capture, analyze, and exploit user data. To expect these entities to host an objective, consumer-first agent is akin to asking the fox to protect the chicken coop.

Such proposals do not democratize AI; they institutionalize the power dynamic favoring the vendor, dressed up in the shiny new clothes of trusted agentic technology. The vendor-hosted agent will inevitably suffer from a conflict of interest. It will prioritize the products that yield the highest margin, mask competitive alternatives under the guise of "simplifying choice," and feed our preferences back into the corporate data lake. True consumer agency cannot exist within a closed corporate ecosystem. It requires independent, decentralized, and locally run models that answer to no one but the individual user.

Pay-to-Play Algorithms and the Opacity of LLMs

Let us look at a concrete example of how this plays out in the real world. Generative AI led to the discipline of GEO (generative engine optimization) to ensure being highlighted in search feeds and assistant recommendations. This is the reality of a black box. When you ask a modern LLM for a product recommendation, you have absolutely no way of verifying why it chose a particular vendor. There is no transparent ledger of recommendations. It is entirely possible that the recommendation you receive is the result of an agreement between the LLM provider and a corporation.

As long as these models remain opaque, any promise of objective personal assistance is a marketing myth. The algorithms are trained on data that is already heavily skewed by advertising dollars and SEO manipulation. Therefore, when an agentic bot uses it, it is recycling corporate propaganda, presenting it as unbiased advice. This is not artificial intelligence; it is automated salesmanship. To combat this, we need absolute transparency in how recommendation engines operate, including a public ledger of all corporate sponsorships and algorithmic biases that influence the output. A tall order.

The Scalability Farce of Manual Compliance

Even if we establish clear privacy guidelines, such as the right to be forgotten or standard opt-outs like in the GDPR, e.g., implemented using the IEEE My Terms standard, the enforcement mechanism is broken. If a consumer requests that their data be deleted or excluded from training sets, how do they verify compliance? They cannot. If you send a compliance request to a trillion-dollar tech company, that request likely lands on the desk of an understaffed compliance team using a manual process to scour databases, call transcripts, and unstructured chat histories. This does not scale. It is impossible for these enterprises to manually comply with millions of granular privacy requests.

The vendor's SOP will be to say they complied. Yet, once your data has been ingested into an LLM, it is practically impossible to "un-train" that model on your information. The data becomes an inseparable part of the algorithmic weights. Therefore, any regulatory framework that relies on retroactive compliance is a toothless tiger. We must shift the battleground from retroactive deletion to proactive, systemic prevention.

VCONs and the Architecture of True Data Sovereignty

If we want consumer agency, we must shift the paradigm. This is where technologies like Virtual Conversations (vCon) become critical. A VCON is a standardized, secure digital container that houses the transcript, audio, and metadata of a conversation. Crucially, instead of relying on a vendor's pinky-promise to respect our privacy, the data itself is encapsulated with its own governance rules. This is a step toward true data sovereignty, but it requires a massive cultural and technical shift.

Conclusion: Taking Back the Loop

The term "human-in-the-loop" is frequently used to describe safe AI integration. But as agentic AI evolves, we are moving toward a world where humans are removed from the loop, replaced by autonomous agents transacting with other autonomous agents. If we do not demand models that genuinely operate on our behalf, we will find ourselves shut out of our own decision-making processes. This is time to stop being passive consumers of AI convenience and start being active architects of our digital autonomy.

Pragmatic Playbook for Enterprise CX Buyers

Enterprise buyers are currently being bombarded with vendor pitches promising that agentic AI will magically solve their customer experience woes. If you are a buyer and concerned about ethical AI use, here is your survival guide to avoid making an expensive, possibly brand-damaging mistake:

Prioritize Architectural Integrity Over Hype: Do not be seduced by an agent's ability to generate natural-sounding excuses. Demand to see the integration map. If the agent cannot access your back-office CRM and ERP data securely and deterministically, it is not an agent; it is a glorified chatbot with a larger vocabulary.

Mandate Strict, Verifiable Data Boundaries: Ensure that your customers' data is never used to train a vendor's public LLM. If the vendor cannot guarantee and prove that your proprietary customer interactions are kept in a secure, isolated RAG environment, walk away. Your customer data is your competitive moat; do not give it away to train your competitor's next model.

Implement 'Agent-in-the-Loop' Safeguards: Autonomous agents are highly efficient at going sideways before they go south. Never deploy an agentic system in a customer-facing role without a deterministic routing mechanism that instantly escalates complex, emotional, or high-value interactions to a well-trained human agent, complete with full conversational context.

Insist on Standardized Metadata and vCon Support: Prepare for a future of decentralized data. Your architecture should support standard containers like vCons to ensure that as consumers demand greater control over their conversational data, your systems can comply programmatically rather than relying on manual, unscalable processes.


Comments

Last Year's Top 5 Popular Posts

You are only as good as your customer remembers

As you know, I am very interested in how organizations are using business applications, which problems they do address, and how they review their success. In a next instance of these customer interviews, I had the opportunity to talk with Melissa Gordon , Executive Vice President, Enterprise Solutions at Tidal Basin about their journey with Zoho. You can watch the full interview on YouTube. Tidal Basin is a government contractor that provides various services throughout the government space, including disaster response, technology and financial services, and contact centers. Tidal Basin started with Zoho CRM and was searching for a project management tool in 2019. This was prompted by mainly two drivers. First, employees were asking for tools to help them running their projects. Second, with a focus on organizational growth and bigger projects that involved more people, Tidal Basin wanted to reduce its risk exposure and increase the efficiency of project delivery. This way, the compa...

SAP Draws a Perimeter around Agentic AI and What That Means for the Rest of US

The most consequential enterprise AI governance document published this year arrived in late April with surprisingly little fanfare. SAP's updated API Policy, version 4/2026 , is a short document in plain English. The clause that is most interesting is Section 2.2.2. It restricts how autonomous and generative AI systems are permitted to interact with SAP APIs. Read literally, it has the potential to change the architecture of agentic AI projects across every SAP customer landscape. Read carefully, it is also more interesting than the lock-in headlines suggest. The policy targets a specific category of AI behavior, not AI as such. It connects to commercial mechanics that go well beyond API stability. And the literal text, in its current form, will probably not survive the next two policy revisions intact. There is a lot to unpack. I will walk through what the policy actually says, how the SAP-watching community is reading it, what the rest of the major enterprise vendors are doin...

The Illusion of Value: Why Salesforce’s Agentic Work Unit is the New "Bad Query" of the AI Era

The News On February. 25, 2026, Salesforce announced a pricing and metrics update . During the company’s Q4 FY2026 earnings call, CEO Marc Benio ff, together with CMO Patrick Stokes , unveiled the Agentic Work Unit (AWU). Positioned as a metric to quantify the labor performed by autonomous digital systems, Salesforce defines an AWU as one discrete task accomplished by an AI agent. According to Salesforce, this discrete task represents the exact moment " raw intelligence is converted into real work ". It is not a fixed unit but measured as a processed prompt, a completed reasoning chain, or an invoked tool. Salesforce explicitly designed the AWU to move the industry conversation away from the raw consumption of Large Language Model (LLM) tokens. As Benioff noted, tokens only measure "how much an AI talks," whereas the AWU is intended to measure actual business execution. The scale of this rollout is massive. Salesforce reported that its platform has already processe...

LLM Showdown: Comparing ChatGPT, Gemini, and Grok for Automated News Research

The analyst’s day is full of research. Now, this is the age of AI and AI is here to help, isn’t it? As everyone is talking about copilots and AI agents, why not using the tools at hand to do a little research on research. NB., no one really has a good definition of an AI agent, so this might become an additional topic for research. But I digress. Imagine the following project at hand, which is not only interesting for analysts, btw, but also for a variety of roles in the corporate world. Let’s call it vendor (competitor) monitoring. The job is the following: Research reputable sites for news about a number of vendors, relating to a set of keywords. Reputable sites are high quality news sites, high quality tech publications, high quality analyst sites and, of course the news pages of the vendors in question. Limit the time frame of the search matching to the cadence of my information requirement, e.g., “yesterday” for a daily update or “last week” for a weekly update. Provide a summary ...

CPQ, Meet Price Optimization: Your Revenue Lifecycle Just Got Serious

The news On October 1, 2025, Conga announced its intent to acquire the B2B business of PROS , following PRO’s acquisition by Thomas Bravo . At the same time, ThomaBravo and PROS announced that PRO’s travel business segment will be run as a standalone business . The bigger picture Revenue operations, revenue management and revenue lifecycle management have become a thing in the past years, as evidenced by the number of specialized companies that solve parts of the overall problem of optimizing revenue. It also got abused to some extent (e.g., surge pricing models) when the users of the corresponding capabilities consider optimizing being the same as maximizing. Reality check: It is not. While optimizing involves a bit of identifying how much a customer is willing to pay, it also involves the thought of repeat business, or in other words customer loyalty, even without a formal loyalty program. And that involves the customer experience, part of which the speed of creating a quote with mat...