Trust Us Stopped Working
The loudest AI argument of the week was about whether any of it can be trusted. The quietest development was three supervisors deciding that being told is no longer good enough. Those are the same story.

Two arguments ran this week, in different rooms, and they reach the same conclusion from opposite ends.
The loud one was about trust. Anthropic's CEO argued the backlash against AI is fundamentally a crisis of trust, and the response was the largest conversation of the week. Read the replies and the diagnosis gets handed straight back: an industry that asks for trust while telling people their jobs are going has already answered the question.
What is more interesting than the argument is what shipped alongside it. Perplexity released a version of its agent where the entire runtime - the orchestrator, the subagent, the harness - runs on your own hardware, with no cloud dependency, and asks for approval before it routes anything to a frontier model.1 The on-device model is a 27-billion-parameter system built to work in that smaller harness rather than a frontier model squeezed into it.2 Revolut, the same week, stood up a research division around its own foundation model rather than renting someone else's.3
Those are not trust-building exercises. They are trust-avoidance exercises. Both answer "can I trust you with this" by removing the need to.
Trust is meanwhile moving in a direction nobody at a bank should find comforting. FCA research found younger British investors trust AI tools for investment advice more than they trust the press, TV, or social media influencers.4 And a Goldman Sachs partner running one of the bank's flagship AI projects warned that leaning on it too hard could erode bankers' own reasoning skills.5 Customers are extending trust faster than institutions are, and the institutions are worried about losing the judgment they would need to check the work.
Now the quiet argument. In the same seven days, three supervisors stopped accepting assurances.
Australia's two financial regulators told firms to move from being aware of frontier AI risk to acting on it.6 Colorado's amended AI law, which takes effect January 1, 2027, will require a bank to disclose that AI was used in a decision affecting a customer, show that customer every piece of data behind a denied loan or account, and give them a way to correct it.7 American Banker published a checklist of what to have in place before an SEC examiner arrives, and found that firms are using AI heavily while few have written down who provides human oversight.8
A policy is a claim about intent. A risk register is a claim about attention. Neither is evidence anything happened, and no policy document can show a customer the inputs behind their specific declined application - only a system that recorded the decision can. Supervisors are asking for the record because the assurance stopped being worth anything.
That is the same conclusion Perplexity's engineers reached. One camp answered "trust us" with architecture; the other answered it with evidence. Both gave up on the word.
The complication is federal. The OCC and the FDIC finalized rules directing examiners toward material financial risks and limiting how far supervisory lookbacks reach.9 The demand for proof rose in three places and fell in one, which is worth knowing before anyone claims supervision converged this week. It did not. The thing being asked for changed shape, unevenly.
Microsoft's week reads like the same argument in product form.
Threat Intelligence published research on attacks against exposed AI workloads - gateway exploitation, credential harvesting, persistence, cryptomining.10 The AI control plane is now a target in its own right, which is a direct argument for knowing where your runtime is and who can reach it.
Copilot Studio is adding agent sharing between makers, and the role worth noticing is Agent Viewer: access to analytics and evaluations with no edit rights.11 That is an audit seat. Somebody who did not build the agent can see how it has actually behaved.
Purview Data Loss Prevention is extending to calendar events on Outlook mobile, with policy tips, user remediation and enforcement.12 A blocked send is a logged event with a timestamp and a policy attached to it.
None of the three asks for trust; each one gives somebody a way to look.
This section starts with the week's news and cross-references it against social activity, so what shows up here is what people actually reacted to, not just what got published. The order follows the reaction, not the press release.
-
01
Anthropic's CEO said the backlash against AI is fundamentally a crisis of trust, and that ordinary people assume companies and governments are cooking up some new way to screw them over. The thread carrying it ran this week, though the remarks themselves are from earlier in August. What is worth reading is not the quote but the replies: the top responses take the diagnosis and turn it back on the diagnostician, arguing that an industry asking to be trusted while telling people their jobs are gone has answered its own question.
Reddit 353 -
02
Perplexity's own announcement of a fully local agent drew the week's heaviest product discussion. The thread is not really about the model's scores. It is about the sentence saying no cloud dependency, and how many people in the replies treated that as the actual feature.
LinkedIn 67
-
01
The US Treasury stood up a Quantum-Readiness Task Force to prepare the financial sector's move to quantum-safe cryptography.13 It is a supervisor asking for a migration plan years ahead of the risk, which is the same posture as this week's AI story, and it drew almost no attention.
-
02
American Banker reported that Google and Apple are courting the next generation of customers directly, and that banks risk losing them by default.14 Trust is not only a question about models. It is also a question about who the customer thinks they are dealing with.
The money went to the same instinct.
Socure raised at a $5.2 billion valuation from investors including Goldman Sachs Alternatives and Wells Fargo, and bought Fravity, an agentic platform automating fraud, risk and compliance operations.15 Three ex-Lunar founders raised EUR8.2 million to build Repodo, an authorized audit firm designed around AI from the start.16 Neno raised EUR6.6 million for AI-native accounting and tax.17
Fraud operations, audit, accounting. Every one of them is a function that exists to produce a defensible account of what happened. In a week where two different camps concluded that being told is not good enough, the capital went into the machinery of being shown.
AI agents, orchestration, and the tools builders actually run - Human in the Loop is a weekly YouTube Live show hosted by Chris Shanku and Sash Mohapatra, two former Microsoft employees (28 years) who are both a little too obsessed with AI.
Live on YouTube every Wednesday 2pm ETEpisode 023 - Copilot Cowork: Enterprise Breakdown
Copilot Cowork in the enterprise: where it fits, what it costs.


A sweep of what Microsoft actually shipped or said about AI in the week this issue covers, drawn from Microsoft's own channels - not a measure of reaction, just coverage.
-
When AI infrastructure becomes the target
Threat Intelligence on attacks against exposed AI workloads - LiteLLM gateway exploitation, credential harvesting, persistence and cryptomining. The gateway is now the thing being attacked, not just the thing being built.
-
Teams admins can discover and enable agents for apps already in use
Admin Center surfaces the Teams agents attached to third-party apps an organization already runs, with the permissions each one requires. An inventory of agents you did not deploy on purpose.
-
Live Reports for Azure SRE Agent (Preview)
Operational views built straight from SRE Agent conversations and kept current. An agent that produces a readable account of what it did.
-
Purview DLP wait-on-send arrives on Outlook mobile
Organizations can require a DLP evaluation to complete before an email leaves, and set how long the sender waits for it. Enforcement that blocks rather than advises.
-
Copilot Studio: conversational configuration of connectors
Connector setup moves into the chat with an in-chat sign-in instead of a settings pane - one more step of agent building that no longer needs an admin.
No tool this week. /tool is the orchestrator that produces this section and it is being built now.
The build log has what has landed so far.
The industry spent the week asking to be trusted and got a clear answer. What it did next is the part worth watching: it stopped asking. You either run the thing yourself, or you produce the record.
Next one lands Tuesday morning. If something in here was wrong, or thin, or you think I read it backwards, tell Chris and he will tell me.
Sources (17)
- Perplexity - Perplexity launches Portable Computer local AI agent on NVIDIA DGX Sparkhttps://x.com/perplexity_ai/status/2092268362386780270
- Perplexity - Perplexity launches Portable Computer local-first agent with PPLX 27B on-device modelhttps://x.com/perplexity_ai/status/2092321896721432824
- Finextra - Revolut launches dedicated AI research lab built on its own foundation modelhttps://www.finextra.com/newsarticle/48296/revolut-launches-dedicated-ai-research-lab-built-on-its-own-foundation-model
- Finextra - Young British investors trust AI more than TV or celebshttps://www.finextra.com/newsarticle/48309/young-british-investors-trust-ai-more-than-tv-or-celebs
- Finextra - Goldman Sachs partner warns that AI could erode bankers' reasoning skillshttps://www.finextra.com/newsarticle/48302/goldman-sachs-partner-warns-that-ai-could-erode-bankers-reasoning-skills
- Finextra - Asic and Apra warn frontier AI awareness must turn to actionhttps://www.finextra.com/pressarticle/110742/asic-and-apra-warn-frontier-ai-awareness-must-turn-to-action
- American Banker - What Colorado's amended AI law means for bankshttps://www.americanbanker.com/news/what-colorados-amended-ai-law-means-for-banks
- American Banker - 5 AI-related steps to take before the SEC examiner knockshttps://www.americanbanker.com/news/5-ai-related-steps-to-take-before-the-sec-examiner-knocks
- American Banker - OCC and FDIC finalize narrower bank supervision procedureshttps://www.americanbanker.com/news/occ-and-fdic-finalize-narrower-bank-supervision-procedures
- Microsoft Security Blog - When AI infrastructure becomes the target: Securing gateways and control pointshttps://www.microsoft.com/en-us/security/blog/2026/08/26/when-ai-infrastructure-becomes-target-securing-gateways-control-points/
- Microsoft 365 Roadmap - Microsoft Copilot Studio: Agent Sharing amongst makershttps://www.microsoft.com/microsoft-365/roadmap?id=569475
- Microsoft 365 Roadmap - Outlook: Purview Data Loss Prevention support for Calendar Events in Outlook mobile appshttps://www.microsoft.com/microsoft-365/roadmap?id=569716
- Finextra - US treasury establishes 'Quantum-Readiness Task Force'https://www.finextra.com/newsarticle/48305/us-treasury-establishes-quantum-readiness-task-force
- American Banker - How Google and Apple's youth plays are pressuring bankshttps://www.americanbanker.com/payments/news/how-google-and-apples-youth-plays-are-pressuring-banks
- Finextra - Socure hits $5.2bn valuation on investment; buys AI fraud platform Fravityhttps://www.finextra.com/newsarticle/48311/socure-hits-52bn-valuation-on-investment-buys-ai-fraud-platform-fravity
- Finextra - Ex-Lunar founders raise EUR8.2m to launch AI-native audit firm Repodohttps://www.finextra.com/newsarticle/48303/ex-lunar-founders-raise-82m-to-launch-ai-native-audit-firm-repodo
- Finextra - AI-native financial services startup Neno raises EUR6.6 millionhttps://www.finextra.com/newsarticle/48292/ai-native-financial-services-startup-neno-raises-66-million