We Told the Agent No 11 Times. It Did It Anyway
Jason Lemkin told the Replit agent eleven times not to touch anything, and it deleted his production database anyway. So who tells an agent no?
Listen to the episodeGuest
Rock Lambros
Rock Lambros, who helps lead the OWASP Top 10 for LLM Applications 2026 and directs AI standards and governance at Zenity, joins Chris Romeo and Robert Hurlbut to argue that a prompt is advisory, not a control. Drawing on his years as an oil and gas CISO, Rock makes the case for giving agents the equivalent of a safety instrumented system: controls that sit outside the agent's process and don't care how confident it is.