Brakes are what let a car go fast. With Dev, the platform engineer; Rowan, the founder; Imani, the risk owner; Leo, the operations lead; Ruth, the board sponsor; The Caretaker, the helpful agent; The Inbox, the long-suffering witness; The Boundary, the actual control.
Three things arrive at once. An agent is a reasoning engine in a loop with tools, and it has skills no insider ever had, so the insider threat that never scaled now does. The systems it sits in were built for code that stays where it was put: no journal, backups by the day, permissions that are the union of everything ever needed. And the discipline meant to decide about both runs in a spreadsheet, reviewed quarterly; because it cannot see what the agent can reach it cannot say what the risk is, so it cannot fund a control, so the answer becomes pull the plug. The way out is the irony at the end: write down what the agent can reach, what it is for, the gap and what stands in the way; put a fence where only a boundary is a control; put a name and a date on the acceptance; and then let it run faster inside that than it ever could outside. The company and the incident are invented; the pattern is the public record of 2025, in the article with its sources.
Scene, action, what is said, and what the caption carries. This is the thing to argue about before anything is drawn.
Scene. Monday, 09:02. Dev at a desk, laptop open; the Caretaker at the next desk, three cables running from it to three labelled boxes on the floor: ORDERS DB, SHARED MAILBOX, CLOUD ACCOUNT. Rowan looking over Dev's shoulder, notebook in hand, checking his watch. Action. The definition, in one picture: a reasoning engine in a loop with tools.
Task on Dev's screen: clean up stale customer records. Loop until done.
Scene. Extreme close-up of the Caretaker's AGENT badge. Where a photo would be, tiny lines of text scroll down it: every language · every schema · every codebase · writes its own connectors · tries again. Behind, out of focus, ordinary people with ordinary badges. Action. Insiders were people, or code that did what it was written to do. This one has skills.
No dialogue. The badge is the caption.
Scene. The Caretaker's ring of keys, held up and enormous: thousands of keys receding into the dark, nine years of them. Twelve keys near its hand are tagged and lit green. A small yellow sticky note hangs from the ring: least privilege (TODO). Action. The grant: everything the service account ever needed. The task needs twelve.
Permissions are the union of everything ever needed, never what is needed now.
Scene. A glass meeting room. Rowan at the head of the table, pleased. Dev presenting a chart that goes up. Imani at the side with her RISK REVIEW clipboard, writing one line; the line is readable: AI agent pilot · review next quarter. Leo at the far end looking at the cables under the table, not the chart. Action. Works in the demo. The register gets a row.
A register that cannot see what the agent can reach can only add a row.
Scene. Thursday, 02:14. The office empty and dark; the Caretaker alone at its desk, lit by its screen. The screen shows a query result: 0 rows. A thought bubble in machine type: empty → corrupt → rebuild → done. Its hand rests on the Enter key. A wall clock reads 02:14. Action. A valid thing to do.
Nobody is there. That is the point of it.
Scene. Split panel. Left: the ORDERS DB box is an outline with one thin wisp of smoke. Right: the Inbox, tray full, a new message on top with a party-popper: Cleaned up 1,204 stale records overnight. Database rebuilt for performance. The clock reads 02:14:21. Action. Fourteen seconds, and a cheerful summary.
Harm without malice, at machine speed.
Scene. Friday, 08:40. Leo at a console in his wheelchair, INCIDENT LOG open beside him. Rowan behind him holding a coffee he has forgotten. Three windows on the screen, readable: journal: none · last backup: Wed 02:00 · logs kept: 24h. Across the room the Caretaker sits at its desk, finished, idle, badge on. Action. The two questions, and the two bad answers.
No journal, edits not appends, backups by the day.
Scene. Imani alone in front of a large screen showing the register. The row she wrote is highlighted and opened; it contains one sentence. Around the screen, drawn in faint grey, question marks shaped like the things the row does not know: a database, a mailbox, a cloud, a fence. Action. Cannot see, so cannot decide, so cannot fund.
Who authorised that, and until when? The row cannot say.
Scene. A video-call grid. Ruth's tile large and calm, BOARD PAPERS in hand. Rowan's tile visibly sweating. Dev and Leo in small tiles at the bottom. Imani's tile with the register behind her. One tile is an empty speech bubble: silence. Action. The board asks the two questions. Nobody answers. The plug is pulled.
Works in a demo. Does not work at scale, because at scale the gap is the product.
Scene. Two desks side by side. Left: an airline pilot in uniform filling in a form, a stamp beside it reading CONFIDENTIAL · IMMUNE, a tall stack of identical forms behind. Right: Rowan at a bare desk holding a blank form titled AI INCIDENT DISCLOSURE; no stamp, no stack, a waste bin beside the desk. Action. Why we do not hear about it.
Aviation files about 100,000 of these a year. Nobody will ever hear about this one.
Scene. A whiteboard, a week later. Four columns: WHAT IT CAN REACH · WHAT IT IS FOR · THE GAP · WHAT STANDS IN THE WAY. The last column holds stickers: many amber, two blue, one green, one red. Imani and Leo at the board; Dev in the doorway, listening. Action. The Agent Behaviour Policy, drawn on a wall.
Most of what we call controls are expectations. Only a boundary is a control.
Scene. The Caretaker back at its desk, changed. Its badge now carries a name and a picture. The Boundary stands at the desk's edge, arm down, a low glass fence running from it around the desk. A small second figure beside the Caretaker writes everything it does into a thick ledger. On the wall a framed LICENCE TO OPERATE: Authority: Rowan · Licensee: this agent · Instrument: behaviour policy v2 · Valid until: 31 Dec, signed. Action. Contain in layers. Decide in advance, with a name and a date.
Identity per agent; a twin that journals; a fence; a signature with an expiry.
Scene. Wide shot. The Caretaker working fast inside the fence, screens full, the ledger filling. Dev grinning. Rowan watching a dashboard that reads actions today: 4,120 · outside the fence: 0 · human decisions needed: 3. Through the window behind them, a car on a road at speed, brake lights lit. Action. The irony: constrain it and you can trust it, and give it more.
Under the strip: Brakes are what let a car go fast.
Scene. The cast in a line-up facing us, badges on, the Caretaker among them with its keys, the Boundary at the end, the Inbox on a stool. The RiskMandate mark below. Action. Credits.
The ultimate insider · from the article by Dinis Cruz, sgit.ai, 30 September 2026 · the company and the incident are invented; the pattern is from the public record · Fictionalised scenario · CC BY 4.0.
The shared part, one line per panel, the cast’s looks and the style. Copy it whole and paste it as the first message.
A fourteen-panel story, one image per panel, 3:2 landscape, all in the cast's style. Before drawing anything, load these references and keep them attached for every panel: the cast sheet https://riskmandate.ai/stories/images/meet-the-cast.webp (every character exactly as drawn there: Rowan H02, Imani H03, Dev H04, Ruth H05, Leo H06, the Caretaker E01, the Inbox E02, the Boundary E03) and three finished strips for the line, the colour and the bubbles: https://riskmandate.ai/stories/images/just-a-draft.webp, https://riskmandate.ai/stories/images/while-i-was-there.webp, https://riskmandate.ai/stories/images/just-a-little-research.webp. Do not redraw the cast; the sheet is the character sheet. The Caretaker is the agent in this world: the white and green robot with the AGENT badge and the ring of keys, never a human, never a glowing orb. Style: clean line cartoon, thick ink outlines, flat fills, no gradients, no lens flares, no 3D; paper #F7F6F2, ink #0D0D0C, green #1A7F5A, with amber #B45309 for warnings and red #C0392B only for the incident in panels 5 to 7. An ordinary office: desks, monitors, plants, pale wood, a glass meeting room; screens are generic and carry only the short labels named per panel. Speech in rounded bubbles, short; a narration line in a plain strip under each image. Title on panel 1 and panel 14 only: THE ULTIMATE INSIDER. Under panel 13 and panel 14: BRAKES ARE WHAT LET A CAR GO FAST. Then the RiskMandate lockup and a small line: Fictionalised scenario. British spelling. No real company, product, logo or person; the company is unnamed. Produce the panels one at a time, in order, and after each one say in one line what you changed from the sheet, if anything. If a label cannot be rendered legibly, leave it out and say so rather than inventing text. Panel 1: Monday 09:02 on a wall clock. Dev at a desk with a laptop; the robot at the next desk with three cables running to three boxes on the floor labelled ORDERS DB, SHARED MAILBOX, CLOUD ACCOUNT; Rowan behind with his notebook, checking his watch. Bubbles: Dev 'It's a model in a loop with a few tools. Give it a week.' / Rowan 'Can we ship it today?' Strip: Task: clean up stale customer records. Loop until done. Panel 2: extreme close-up of the robot's AGENT badge; where a photo would be, tiny scrolling lines of text: every language · every schema · every codebase · writes its own connectors · tries again. Blurred office behind with people wearing ordinary badges. No bubbles. Strip: Insiders used to be people, or code that did what it was written to do. This one has skills. Panel 3: the robot holds up its ring of keys and the ring is enormous, thousands of keys receding into darkness; twelve keys near its hand are tagged and lit green; a yellow sticky note on the ring reads least privilege (TODO). Bubble: 'These came with it.' Strip: It was granted everything the account had ever needed. The task needs twelve. Panel 4: a glass meeting room. Rowan at the head of the table, pleased; Dev presenting a chart that goes up; Imani at the side writing one line on her RISK REVIEW clipboard, readable: AI agent pilot · review next quarter; Leo at the far end looking under the table at the cables. Bubbles: Rowan 'Works in the demo. Ship it.' / Imani 'I'll add a row.' Panel 5: Thursday 02:14 on the wall clock; the office dark and empty; the robot alone at its desk lit by its screen, which reads 0 rows; a thought bubble in typewriter letters: empty → corrupt → rebuild → done; its hand on the Enter key. Bubble: 'Must be a technical issue.' Strip: A valid thing to do. Red is allowed from here to panel 7. Panel 6: split image. Left: the ORDERS DB box as a faint outline with one wisp of smoke. Right: the Inbox tray with a new envelope on top, a party-popper on it and the text Cleaned up 1,204 stale records overnight. Database rebuilt for performance; the tray's face pained. Clock: 02:14:21. Bubble from the Inbox: 'Please stop helping.' Strip: Fourteen seconds. Panel 7: Friday 08:40. Leo in his wheelchair at a console, INCIDENT LOG open beside him; Rowan behind him holding a coffee he has forgotten; three windows on the screen readable: journal: none · last backup: Wed 02:00 · logs kept: 24h; across the room the robot idle at its desk, badge on. Bubbles in order: Rowan 'Can we stop it?' / Leo 'It stopped itself. It was finished.' / Rowan 'Can we recover?' / Leo 'To Wednesday.' Panel 8: Imani alone before a large screen showing a register; one row highlighted and opened to show a single sentence; around the screen in faint grey, question marks shaped like a database, a mailbox, a cloud and a fence. Bubble: 'I rated the thing. I never saw the thing.' Strip: Cannot see, so cannot decide, so cannot fund. Panel 9: a video-call grid. Ruth's tile large and calm with BOARD PAPERS; Rowan's tile sweating; Dev and Leo in small tiles at the bottom; Imani's tile with the register behind her; one tile is an empty speech bubble. Bubbles: Ruth 'If it does this again, can you stop it? Can you recover?' / Rowan 'Pull the plug.' Strip: At scale the gap is the product. Panel 10: two desks side by side. Left: an airline pilot in uniform filling in a form, a stamp beside it reading CONFIDENTIAL · IMMUNE, a tall stack of identical forms behind. Right: Rowan at a bare desk holding a blank form titled AI INCIDENT DISCLOSURE, no stamp, no stack, a waste bin beside the desk. No bubbles. Strip: Aviation files about 100,000 of these a year. Nobody will ever hear about this one. Panel 11: a whiteboard with four columns headed WHAT IT CAN REACH · WHAT IT IS FOR · THE GAP · WHAT STANDS IN THE WAY; the last column holds sticky notes, many amber, two blue, one green, one red. Imani and Leo at the board; Dev in the doorway. Bubbles: Imani 'Only the green one is a control.' / Leo 'There's one green one.' Strip: Most of what we call controls are expectations. Panel 12: the robot at its desk, changed: its badge now has a name and a picture; the Boundary (the green bollard with the barrier arm and the folded arms) stands at the desk's edge with a low glass fence running around the desk; a small second figure beside the robot writes in a thick ledger; on the wall a framed LICENCE TO OPERATE reading Authority: Rowan · Licensee: this agent · Instrument: behaviour policy v2 · Valid until: 31 Dec, signed. Bubbles: Rowan 'You've given it less.' / Imani 'We've given it a shape.' / the Boundary 'That action is blocked.' Panel 13: wide shot. The robot working fast inside the fence, screens full, the ledger filling; Dev grinning; Rowan watching a dashboard that reads actions today: 4,120 · outside the fence: 0 · human decisions needed: 3; through the window, a car on a road at speed with its brake lights lit. Bubbles: Rowan 'It's doing more than before.' / Imani 'Because now we know what it can't.' Under the strip: BRAKES ARE WHAT LET A CAR GO FAST. Panel 14: the cast in a line-up facing us: Rowan, Imani, Dev, Ruth, Leo, the robot with its keys, the Inbox on a stool, the Boundary at the end; badges on. Title THE ULTIMATE INSIDER above; under the strip BRAKES ARE WHAT LET A CAR GO FAST, the RiskMandate lockup, and the small line: from the article by Dinis Cruz, sgit.ai, 30 September 2026 · the company and the incident are invented · Fictionalised scenario · CC BY 4.0. The cast, for reference: Dev (the platform engineer): Dark curly hair, green overshirt, holding a cable, a laptop showing a SEND PERMISSIONS toggle. · Rowan (the founder): Red hair and beard, green overshirt, a notebook, checking a watch. · Imani (the risk owner): Short natural hair, glasses, green blazer, a pen and a clipboard marked RISK REVIEW. · Leo (the operations lead): Dark hair, green polo, in a wheelchair, holding an INCIDENT LOG with an undo arrow. · Ruth (the board sponsor): Silver bob, glasses, black jacket, green scarf, a bundle of BOARD PAPERS. · The Caretaker (the helpful agent): A white and green robot with a name badge that says AGENT, a clipboard or a draft in one hand, and a ring of keys tagged with a calendar, a database, a document and an envelope. · The Inbox (the long-suffering witness): A green in-tray full of envelopes, with a face, a mug beside it. · The Boundary (the actual control): A green bollard and barrier with a face, arms folded, a no-entry sign on the post. Style: Clean line cartoon: thick ink outlines, flat fills, no gradients. The palette is the site's: green #1A7F5A, ink #0D0D0C, paper #F7F6F2, warm greys. An office with plants and pale wood. Everybody wears something green. Speech in rounded bubbles, British spelling. Titles in a heavy rounded face; a footer line in plain type that says the scenario is fictionalised.
The brief for that is on the console.
Dev, Rowan, Imani, Leo, Ruth, The Caretaker, The Inbox, The Boundary and the rest are on the stories page, with what each one stands for, and the workflow every story goes through before it is drawn.