Forty percent, and the eight percent underneath it

Gartner says 40% of enterprise applications will carry agents by year end. Surveys say 7-8% of organisations can govern agents across systems. Both numbers are probably right, and the space between them is where the next two years of incidents live.

Gartner projects 40% of enterprise applications will ship with task-specific agents by the end of 2026, up from under 5%. An eightfold move in twelve months is not an adoption curve. It is a default changing.

Nobody decided this

Deliberate adoption comes with machinery: a review, an owner, a budget line, someone whose name is on it. Shipping-by-default comes with none of that. The capability arrives inside the next version of something already licensed, already deployed, already granted access to the corpus — and it inherits every permission that tool already held.

Salesforce rebuilding Slackbot into an agent that searches, drafts and acts is the clean example. Same name, same entry point, same permissions. Excellent product design, with zero training cost and immediate reach. Also a complete change in what the thing does, arriving under a name users learned to associate with reminders.

Consent does not transfer

The permissions granted to a notification bot are being asked to cover an actor. No user consented to that, because no user was presented with it as a choice — and the honest answer is that most would say yes if asked. That is not the problem. The problem is that nobody asked, so nobody thought about it, so nobody scoped it.

Expect this shape across every incumbent productivity suite this year, because it works and because the alternative is losing the surface to a startup. The competitive advantage of an incumbent was never model quality. It is already holding the data and the permissions.

Two numbers, one gap

Forty percent of applications carrying agents. Seven to eight percent of organisations with integrated cross-agent governance. Over seventy-five percent flagging vendor and API dependency risk. Those are not points on a maturity curve that will converge with time — they are a capability shipping faster than the ability to supervise it, in a market where the shipping is done by vendors and the supervising by customers.

And the compliance floor moved underneath all of it. Article 50 became enforceable on 2 August, with disclosure duties that attach to systems interacting with people. An agent that arrived in a product update, that nobody scoped, in an organisation without cross-system governance, is now also a regulated interaction. Working out which of your tools became agents this quarter is no longer an architecture question.

Gartner — Gartner predicts 40% of enterprise apps will feature task-specific AI agents by 2026 → · TechCrunch — Salesforce announces an AI-heavy makeover for Slack, with 30 new features → · Process Excellence Network — Gartner predicts task-specific AI agent growth →