The Agentic Enterprise
Part IV · The Enterprise BoundaryChapter 11 of 14

Agents Across the Company Boundary

Chapter 11 examines what happens when delegated software meets a counterparty. Cross company agent interaction depends on institutions as much as interfaces — identity, scoped delegation, semantics, commitment, provenance, and recourse — and technical interoperability should never be mistaken for trust.

← Publication Contents

An agent working inside one company operates within that company’s systems of identity, permission, policy, and accountability. Across a company boundary, those assumptions stop. A supplier’s agent does not inherit a customer’s trust. A counterparty’s software cannot create authority simply by making a convincing request.

The possibility of agent to agent coordination therefore depends on institutions as much as interfaces.

01

The boundary already has infrastructure

Companies already exchange structured information through application interfaces, electronic data interchange, procurement networks, identity systems, and contractual processes. These mechanisms coordinate defined transactions such as orders, invoices, shipments, and service requests.

Agents could extend this infrastructure into cases that require more interpretation. A supplier agent might explain a delay, provide evidence, identify affected orders, and propose alternatives. A customer agent could compare those proposals with commitments, constraints, and internal priorities. Each could reduce the human effort of assembling the situation.

But a conversation between agents does not by itself establish shared meaning or a binding agreement. The systems need to distinguish a request, a statement, a proposal, an approval, and a commitment. A message that sounds like an offer may not be authorized to bind the company.

02

What counterparties must establish

Controlled cross company interaction requires answers to several questions:

  • Identity: Which organization and principal does the agent represent?
  • Delegation: Who authorized it, and for which tasks?
  • Disclosure: What information may it receive or reveal?
  • Semantics: What do the exchanged terms and evidence mean?
  • Commitment: Which action is a proposal, and which creates an obligation?
  • Provenance: How can each party inspect the origin and integrity of a claim?
  • Recourse: How are errors, disputes, revocation, and liability handled?

These questions belong to separate layers. A transport protocol can deliver a message without establishing its commercial meaning. Authentication can verify an identity without proving that an agent may approve a price change. A signed record can preserve what was agreed without determining whether the agreement is enforceable.

The architecture should avoid treating technical interoperability as institutional trust.

03

A bounded cross company exchange

A practical starting point is a narrow, reversible workflow. For example, a buyer’s agent requests a shipment status and supporting evidence from a supplier’s agent. The supplier system returns an authenticated status, source references, and a proposed revised delivery date. The buyer’s system checks which orders and customer commitments may be affected, then routes any change requiring approval to an authorized person.

The agents can exchange information and prepare options. A binding change follows the parties’ existing authority and contractual process unless they have explicitly agreed to delegate that decision. Both companies retain records of what was requested, disclosed, proposed, approved, and executed.

This arrangement could reduce time spent on routine status gathering. It still depends on compatible terms, dependable evidence, and a clear path when the parties disagree.

04

The risk of asymmetric delegation

Cross company systems may not share power equally. A dominant buyer could require suppliers to connect to its agent platform, disclose more data, or accept automated terms. A large platform could define the vocabulary and rules that smaller participants must follow. Automation may shift negotiation costs and accountability onto the less powerful party.

Governance must therefore include the commercial relationship. Participants need control over what their agents can disclose and accept, the ability to revoke delegation, and a way to contest automated interpretations. The right to use an agent should not silently become the right to bind another company.

05

The conditional network

Today’s systems support machine readable exchange for defined business processes. Emerging agents may help interpret exceptions and coordinate less structured interaction. A future network of agents across firms is possible, but it would require more than a shared protocol: it would need identity, scoped authority, common enough semantics, evidence, audit, dispute resolution, and workable commercial terms.

No single “agent trust fabric” should be assumed. It may develop through industry specific contracts, registries, standards, or platform arrangements, or it may remain fragmented. The useful test is whether a specific cross company commitment becomes easier to fulfill with lower total cost and clear recourse when the system is wrong.

The company boundary may become more navigable to software. It remains a boundary of authority, liability, and bargaining power.

Evidence & Sources
  1. Open interoperability standards for agentic systems (MCP, A2A)
    Model Context Protocol; Agent2Agent Protocol, Linux FoundationAccessed September 2026Technical Publication

    Source Note 09 of R-01 · The Computational Enterprise. Common interfaces for connecting agents to tools and to one another across platforms.

  2. AI Agent Standards Initiative
    National Institute of Standards and TechnologyAccessed September 2026Institutional Research

    Source Note 10 of R-01 · The Computational Enterprise. Secure interoperability and agent identity as conditions for trusted adoption.