--- title: "The Agent Permission Slip" newsletter: "MLOps Community" date: 2026-05-21 source: https://aaif.live/newsletters/mlopscommunity/2026-05-21-the-agent-permission-slip --- # The Agent Permission Slip *Plus… while loops, reviewer costs, and Claude Design workflows* *MLOps Community — Agentic AI Foundation, 2026-05-21* Thanks to everyone who sent kind words after yesterday’s announcement. For anyone who missed it: MLOps Community is joining the Linux Foundation as the official user group of the Agentic AI Foundation. Tldr: the community will continue - podcasts, events, practitioner-first conversations - they aren’t going away. What changes is the support behind it - more resources, broader reach, and a clearer path for what comes next.  A new name and a new look are coming, and we’ll share more over the next few weeks. But the practitioner-first, nobody’s-selling-you-anything culture is not changing. This community only works because people keep showing up, asking questions, sharing what’s working, and helping each other figure out what comes next. I wrote more about it on our blog if you want the longer version [https://go.mlops.community/MLOpsAAIF]. ## PR and Prejudice Code is cheap now. Review isn't. Agents can generate more work than teams can safely understand, approve, and maintain. What is scarcer? Code or Review [CODE](https://gatewaze.mlops.community/offer/surveys/?sid=yesno&question=Code+is+cheap+now.+Review+isn%27t.Agents+can+generate+more+work+than+teams+can+safely+understand%2C+approve%2C+and+maintain.What+is+scarcer%3F+Code+or+Review&y=CODE&n=REVIEW&oneclick=true&accept=true) [REVIEW](https://gatewaze.mlops.community/offer/surveys/?sid=yesno&question=Code+is+cheap+now.+Review+isn%27t.Agents+can+generate+more+work+than+teams+can+safely+understand%2C+approve%2C+and+maintain.What+is+scarcer%3F+Code+or+Review&y=CODE&n=REVIEW&oneclick=true&accept=true) ## We Don’t Talk Anymore Maybe the result was influenced by the voting method... With a chat box, we might have heard more from readers like Henry Zhang, who emailed to say chat windows are easy to build but users often don't know how to use them properly. ## Autonomous Agents at Work: From OpenClaw Hype to Enterprise Reality Autonomous agents sound useful until one has write access, borrowed credentials, and a bad instruction hidden in an email. The enterprise question is no longer whether agents can act, but where they should be allowed to act. * Autonomy needs tiers: reversible work can run with fewer gates, while production changes, customer-facing actions, and legal or policy work need tighter approval. * Tools are attack surfaces: skills, MCP servers, and third-party tools should be treated like executable dependencies, with scanning, allowlists, egress controls, and scoped identity. * Observability has to cover behavior: teams need traces, run-level costs, tool-call limits, recursion caps, safety checks, and business-impact logs. The safest agent is the one whose authority, cost, and blast radius are visible before it acts. [https://podcasts.apple.com/gb/podcast/autonomous-agents-at-work-from-openclaw-hype-to-enterprise/id1505372978?i=1000768600821](https://podcasts.apple.com/gb/podcast/autonomous-agents-at-work-from-openclaw-hype-to-enterprise/id1505372978?i=1000768600821) [https://home.mlops.community/home/videos/autonomous-agents-at-work-from-openclaw-hype-to-enterprise-reality](https://home.mlops.community/home/videos/autonomous-agents-at-work-from-openclaw-hype-to-enterprise-reality) [https://open.spotify.com/episode/7k3fAyxenYlTBGYbkoSRIp?si=6742dfb83a2b4a15](https://open.spotify.com/episode/7k3fAyxenYlTBGYbkoSRIp?si=6742dfb83a2b4a15) ## Agents are Just While Loops Long-running agents sound mysterious until you strip them back to a loop that calls a model, uses tools, and keeps enough state to continue later. This episode looks at what has to sit around that loop before it becomes production infrastructure. * Agent harnesses have layers: the inner loop handles model calls and tool use, while the outer runtime deals with deployment, recovery, and execution over time. * Durability has limits: checkpointing can help with pod failures, network drops, and restarts, but it does not magically fix bad outputs or external system state. * ML pipelines may fit better than transactions: agent workloads are often bursty, stateful, and long-running, which makes the pipeline model a cleaner starting point than low-latency queue-worker thinking. The useful framing is that production agents need runtime discipline around a simple loop, not more mystery around the word “agent.” [https://podcasts.apple.com/gb/podcast/agents-are-just-while-loops/id1505372978?i=1000767970107](https://podcasts.apple.com/gb/podcast/agents-are-just-while-loops/id1505372978?i=1000767970107) [https://open.spotify.com/episode/32k7450izbt1XFy52j7lm6?si=Hc5Jv7C0R8eoCtdyyoMIjw](https://open.spotify.com/episode/32k7450izbt1XFy52j7lm6?si=Hc5Jv7C0R8eoCtdyyoMIjw) ## From Claude Design to Working Code Last week’s Coding Agents Lunch & Learn with Rahul focused on moving from Claude Design to working code, including how to turn rough ideas into usable prototypes, resources, and reusable workflows. Read the short PDF write-up here [https://learn.mlops.community/wp-content/uploads/2026/05/lunch-learn.pdf]. The next Coding Agents Lunch & Learn is tomorrow, May 22, at 5:00 PM BST / 4:00 PM UTC. Session 12 covers Hermes, sandboxes, advanced agent workflows, skill evaluations, Git worktrees, multi-agent experimentation, and safer ways to build with coding agents. Join the next session here [https://home.mlops.community/home/events/coding-agents-lunch-and-learn-session-12-hermes-sandboxes-and-advanced-agent-workflows-c52x0egwvd?agenda_day=6a0b75044dec9774b1611e51&agenda_track=6a0b75054dec9774b1611e68&agenda_stage=6a0b75044dec9774b1611e57&agenda_filter_view=stage&agenda_view=list]. ## Agent ROI in Production is Mostly Reviewer Time The expensive part of a production agent often isn’t the model. It’s the human still checking the work after the agent ships, when “automation” quietly becomes a new AI ops job. * ROI math gets messy in production: model spend is only one line item. Reviewer time, eval runs, retrieval, storage, observability, prompt updates, and process changes all add up. * Agent costs hide in the tail: a task may look cheap on average, while edge cases loop through retries, tool calls, rerankers, and larger context windows. * The work often moves: support staff may handle fewer tickets, but someone still reviews edge cases, tracks drift, updates evals, and owns escalations. The real cost question is what the full process costs after the agent is in the loop. [Read the blog](https://home.mlops.community/home/blogs/agent-roi-in-production-is-mostly-reviewer-time) --- Source: https://aaif.live/newsletters/mlopscommunity/2026-05-21-the-agent-permission-slip