<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>AI agents on carney.wiki</title><link>https://carney.wiki/tags/ai-agents/</link><description>Recent content in AI agents on carney.wiki</description><generator>Hugo -- gohugo.io</generator><language>en</language><lastBuildDate>Mon, 01 Jun 2026 00:00:00 +0000</lastBuildDate><atom:link href="https://carney.wiki/tags/ai-agents/index.xml" rel="self" type="application/rss+xml"/><item><title>AI Agents Need More Than a Semantic Layer</title><link>https://carney.wiki/blog/ai-agents-need-more-than-semantic-layer/</link><pubDate>Mon, 01 Jun 2026 00:00:00 +0000</pubDate><guid>https://carney.wiki/blog/ai-agents-need-more-than-semantic-layer/</guid><description>A semantic layer is not an AI strategy.
It is one important part of one.
That distinction matters because a lot of companies are still treating AI like a smarter search box. They connect a model to documents, databases, dashboards, SaaS tools, or internal knowledge bases and expect useful work to fall out the other side.
Sometimes it does.
More often, the model gives a plausible answer, misses the business logic, forgets the prior context, or takes an action without understanding how the work is actually supposed to get done.</description></item><item><title>Data Governance Isn't Dead. It's Becoming AI Readiness.</title><link>https://carney.wiki/blog/did-governance-just-die/</link><pubDate>Tue, 17 Feb 2026 00:00:00 +0000</pubDate><guid>https://carney.wiki/blog/did-governance-just-die/</guid><description>Data governance is not dead.
Governance theater is.
If you have ever sat through a data governance council where everyone agreed definitions matter and then immediately went back to shipping whatever, you know the problem.
The meeting was not governance.
It was a performance about governance.
That used to be annoying. In the AI era, it becomes dangerous.
Humans can often patch ambiguity with tribal knowledge. They know which dashboard is &amp;ldquo;really&amp;rdquo; used by finance, which field is stale, which Salesforce status is fiction, and which metric definition nobody says out loud.</description></item><item><title>Simplifying Data Modernization in the Age of AI Agents</title><link>https://carney.wiki/blog/data-modernization/</link><pubDate>Mon, 16 Feb 2026 00:00:00 +0000</pubDate><guid>https://carney.wiki/blog/data-modernization/</guid><description>Modern data stacks were supposed to make things easier.
Faster insights. More self-service. Better dashboards. Cleaner pipelines. Fewer heroic spreadsheet rescues.
Instead, a lot of organizations ended up with complexity by default: more tools, more integration work, more handoffs, more cloud spend, and a growing gap between data work and real business outcomes.
Now AI agents are being layered on top of that mess.
That is not automatically bad. But it is risky if leaders treat AI like a shortcut around the fundamentals.</description></item><item><title>Your AI Agent Is a Toddler With Root Access</title><link>https://carney.wiki/blog/your-ai-agent-is-a-toddler-with-root-access/</link><pubDate>Tue, 10 Feb 2026 00:00:00 +0000</pubDate><guid>https://carney.wiki/blog/your-ai-agent-is-a-toddler-with-root-access/</guid><description>Agentic AI is no longer a demo.
It calls APIs.
It writes to databases.
It triggers workflows that affect customers, revenue, and operations.
That is powerful.
It is also a fundamental shift in risk.
Once an AI system moves from advisory to execution, it becomes part of the control plane. Whether the organization admits that or not is mostly irrelevant. The risk already changed.
Agents expand the attack surface overnight The moment an AI system can execute actions, it becomes a privileged actor.</description></item><item><title>Prompt Injection Has Left the Chatbot</title><link>https://carney.wiki/blog/prompt-injection-has-left-the-chatbot/</link><pubDate>Thu, 05 Feb 2026 00:00:00 +0000</pubDate><guid>https://carney.wiki/blog/prompt-injection-has-left-the-chatbot/</guid><description>Prompt injection did not suddenly become dangerous.
We connected it to systems that matter.
For years, prompt injection was treated as a curiosity: a way to make a chatbot ignore rules, leak instructions, or say something awkward. Interesting for demos. Annoying in production. Easy to dismiss as a model behavior problem.
That framing is obsolete.
The recent reporting around ServiceNow AI agent vulnerabilities should make the shift clear. This is not just about a model getting confused.</description></item></channel></rss>