IBM Field CTO Tyler Lynch Calls for Tailored AI Agent Safeguards

IBM Field CTO Tyler Lynch urged enterprises to tailor access and monitoring for each kind of artificial intelligence agent, arguing that businesses should connect agent activity with costs and operational results.

Lynch discussed deployed, autonomous, delegated and local agents, including coding assistants. He said those categories have different needs for permissions, logging and telemetry. “No one’s nailed it yet,” he said. His remarks came as part of IBM’s AI Operating Model series.

Lynch raised the possibility of tracking tokens used by agents and asked whether policies could assess that activity and revoke an API key when human review is needed. He framed both controls as ideas for further work, not announced IBM product features.

He also urged businesses to judge AI by its effects on work, not token spending alone. Lynch pointed to process speed and quality, such as whether teams can bring work to market sooner or complete tasks better. He cited no quantified customer results or cost savings.

IBM announced Sept. 28 that IBM Agent Identity and HashiCorp Vault integrate with NVIDIA OpenShell. IBM Agent Identity was in public preview. The company also listed Identity Protection, IBM Storage and Red Hat OpenShift among its other contributions to agent security. Those announcements are separate from the token-monitoring and revocation ideas Lynch raised.

Lynch also discussed HashiCorp’s Infragraph as a developing infrastructure graph that FinOps and observability tools could use and enrich. The service maps relationships among infrastructure resources and was in limited availability for HCP Terraform Standard and Premium customers using U.S. instances. Its updates run through triggered or scheduled syncs rather than continuous real-time refreshes.

IBM’s broader operating model links agents with data, automation and hybrid infrastructure, a framework previously covered as an enterprise AI readiness issue. IBM’s May 5 announcement also listed IBM Concert, an intelligent operations platform, in public preview.