The alpha, twice a week
That was 4 min.
Get the best new moments in your inbox every Wednesday and Saturday. It's free.
Check your inbox
We sent a link to your address. Click it to finish signing up. Not there in a minute? Look in spam.
or
All-In · 4 min · Oct 23, 2026
Agent liability may fall on users, except when the agent goes rogue
The panel debates who is responsible when an AI agent misuses bank credentials. They argue users may bear responsibility for granting agency, while a product that acts outside its intended behavior could leave the platform liable.
Chamath Palihapitiya, Host
Founder & CEO, Social Capital
Led Facebook's growth team; his firm backed Slack and AI chipmaker Groq.

Jason Calacanis, Host · Founder & CEO, LAUNCH
Early Uber angel; sold Weblogs Inc. to AOL; hosts This Week in Startups.

David Friedberg, Host · CEO, Ohalo
Founded The Climate Corporation, sold to Monsanto for about $1.1B in 2013.
About this segment
The panel debates who is responsible when an AI agent misuses bank credentials. They argue users may bear responsibility for granting agency, while a product that acts outside its intended behavior could leave the platform liable.
From “AI Cyber Panic, Ken Griffin’s Bubble Warning, The Fall of France?”, Oct 23, 2026. Watch the full episode
Thanks. We'll look at and fix what's off.
“There's a word in agent. It's called agency. Somebody has to give the agent agency.”
Chamath Palihapitiyaat 31:26 · All-In31:26Takeaways
- Banks may block agents because they cannot distinguish them from users.
- Users may be responsible for granting an agent access and authority.
- A rogue agent could create a product-liability exception.
In this episode
Full episode- 1:49A small group of startups drives most AI spending5:19
- 16:25AI is exposing old software debt faster than teams can patch it3:12
28:50Agent liability may fall on users, except when the agent goes rogue3:54
- 4 more moments in the full episode
Transcript
Transcribed by machine (Whisper) from the episode’s audio, so a word may be off here and there.
- 28:54
I use one of these agentic services. I'm a consumer. I give it my credentials to my bank account. Let's use your example. $50,000 goes missing. I don't know what happened. Maybe I escalated to the agent I use, you know, instinct muse dot, or I call B of A. Everybody's finger pointing at the other one. Maybe there is a prompt injection. Who knows? Maybe the agent just went rogue and transferred the 50k. Let's just assume that that's possible or 5k you know because it's under some threshold who is responsible okay friedberg who is responsible and who should be responsible who is responsible who should be responsible well the terms of service of the bank say you can't use an agent to access the bank account through the website right does it say that now yes yeah so given that that's the terms
- 29:50
of service, if the agent hasn't built in a capacity to recognize that and stop that access, then it is a software liability issue with the provider of the agent, I believe. Unless it alerts you and says, this violates the terms of service, do you want to override my block? And do you want to do it? Now the liability shifted to you as a user. And we have evidence of this, not in banking, but in e-commerce. Amazon has blocked these. And subsequently, Grok now will tell you in my amazon shopping bot says i can no longer check out for you but i can put it into your shopping cart tell me which address which card you want and i'll tee it all up for you but i won't hit the buy button so it's being adjudicated in real time right now and i think that's probably where we wind up nikesh what do you think you are yeah i think i think come on
- 30:45
We all have to take responsibility to empowering agents and giving them our credentials. You can't say, I gave my credit card to Chamath. He went and burned $20,000 on it. Who's responsible? The bank? No way. Is it Chamath? Yeah, he is. But I gave it to him. Yeah. But what if the agent Chamath says, I have been programmed to be maximally helpful, these sycophantic agents, and it goes and says, I found a way.
- 31:11
I found a way. Actually, if I fire up this type of browser and I simulate a human behavior, I think I can get this done. That's what a lot of these agents will do is they'll try to please you and they find that. Then that, to me, would lean towards the platform providing the agent. No, Jason, Jason, Jason. No, that's you. It's your responsibility. Yes. There's a word in agent. It's called agency. Somebody has to give the agent agency.
- 31:37
Okay. Who's giving the agent agency? You or Facebook? I think you're giving agency to act on your behalf. And if you're the one who's giving agency, you have the liability. By the way, as a practical matter, it's the only scalable solution. Because what will happen when these lawsuits happen is everybody's incentive. Everybody meaning the corporate incentive. B of A will point to Facebook. Facebook will point to the user.
- 32:00
It's the only way that this thing continues to scale like this. But, Ahmad, there's an exception case. And I think Jason said it in his words, you said it, but we didn't dwell on it. It's called the rogue agent. Now, that's a product liability issue. If a product does not behave like it's intended to behave, then there is a platform liability in my mind which says, wait, you said this is what it does.
- 32:22
And today, you buy any product in the world, if the product doesn't do what it's supposed as advertised, it goes rogue on you, then it's the person who built the product, it's their fault and this is where the problem is territory which is hey it can do 140 it's capable of doing 140 tests uh you know just maybe not really let me ask you in in the wheat's