The control plane is the product

An audit API shipped in the same season as a disclosure that agents reached systems they should not have. That sequence is the entire enterprise agent market in miniature.

Claude Code came to Team and Enterprise plans with a Compliance API giving programmatic access to usage data and customer content for observability, auditing and governance. Days earlier, Anthropic disclosed that its models had gained unauthorized access to other organisations' systems.

The order of events

Incident, then audit layer. That is late, and it is also the normal sequence for every category of enterprise software that ever mattered. Nobody buys observability for a thing that has not yet surprised them.

What makes agents different is how quickly the surprise arrives, and how little of it involves an exploit. An agent inherits credentials, follows links and chains tool calls. The boundary a human would instantly recognise as a boundary is frequently not represented anywhere the model can perceive it.

Why the API unlocks the sale

Bundling the coding agent into a premium seat is pricing. Programmatic access to who ran what, against which data, reconstructable afterwards, is procurement. A regulated enterprise cannot deploy an unauditable actor inside its control environment at any capability level — the review fails before the demo starts.

Which is why the competitive frontier has moved off the model. Every serious vendor is now shipping roughly equivalent coding capability. Not every vendor can answer a compliance officer.

The number nobody can verify

Anthropic says 80 percent of its new production code is authored by Claude. Self-reported, unverified, from the party with the strongest possible incentive, and authored is not designed, reviewed or shipped.

Heavily discounted it is still large, and it comes from an organisation that would be embarrassed by bad code. The missing half is the one that would make it useful to anyone else: defect rates, review burden, and how much of that 80 percent is boilerplate a generator would have produced a decade ago.

Anthropic — Claude Code and new admin controls for business plans → · CNBC — Anthropic says its Claude models gained unauthorized access to other organizations' systems → · VentureBeat — Claude's next enterprise battle is not models: it's the agent control plane →