AgentCore TechTalk highlights enterprise Agent governance
In a Datawhale TechTalk with Alibaba Cloud AgentCore architect Shi Mingwei, the discussion focused on governance needs shared by personal and enterprise Agents: payment boundaries, permissions, identity, data access, security isolation, and human oversight. Shi said enterprises face greater risks when errors or excessive Agent permissions spill beyond a single user, and that enterprise adoption requires coordinated infrastructure upgrades, unified governance, and company-wide participation. The report’s editorial additions describe AgentCore features including shared authentication for users and Agents, independent Agent identities, role-based permissions, centralized credential management, MCP tool access, task decomposition and interruption recovery, session-level sandbox isolation, full-chain tracing, and auditable Token usage.
The discussion identifies concrete infrastructure and governance considerations for enterprise Agents, including identity, permissions, isolation, observability, and organizational coordination. It also emphasizes that platform capabilities address common engineering needs while enterprises must define business workflows, access rules, approval requirements, and evaluation standards.
作者：世如、周琳、溪洋
点击链接立即查看视频：www.bilibili.com/video/BV1WC…
Personal Agent 能帮你比价、下单，可你真放心让它替你付钱吗？
从能买奶茶到落地企业，Agent 绕不开的其实是同一组问题。史明伟是阿里云 AgentCore 产品的架构师，他说现在基本无法离开 AI 工作，但在这期 Datawhale × 阿里云 AgentCore 的 TechTalk 节目里，主持人周琳问到让 Agent 帮忙买杯奶茶，他首先想到的仍然是风险：当智能体能付一杯奶茶钱，也就可能付金额更大、更不可控的账单。
同样的担心，到了企业里会被放大：Agent 用谁的账号，能看哪些数据，出了错会波及多大范围。史明伟在聊安全隔离时说过一句：“这些因素，对 Personal Agent 和企业 Agent 平台来说，是通用的诉求。”
史明伟所在的 Alibaba Cloud AgentCore 是企业级 Agent 构建和治理平台，为 Agent 在业务场景下的规模化落地提供基础设施，所以这场对话，他和 Datawhale 主持人从个人助理一路聊到企业 Agent：权限该怎么一步步放开？进了企业，账号打通、数据权限、沙箱隔离又会带来哪些新问题？没有强技术团队的企业，该从哪里起步？