ZDNET: “The vast majority of agentic AI systems disclose nothing about what safety testing, if any, has been conducted, and many systems have no documented way to shut down a rogue bot, a study by MIT and collaborators found…The 39-page report, “The 2025 AI Index: Documenting Sociotechnical Features of Deployed Agentic AI Systems,” which can be downloaded here, is filled with gems about just how little can be tracked, traced, monitored, and controlled in today’s agentic AI technology.  For example, “For many enterprise agents, it is unclear from information publicly available whether monitoring for individual execution traces exists,” meaning there is no clear ability to track exactly what an agentic AI program is doing. “Twelve out of thirty agents provide no usage monitoring or only notices once users reach the rate limit,” the authors noted. That means you can’t even keep track of how much agentic AI is consuming of a given compute resource — a key concern for enterprises that have to budget for this stuff. Most of these agents also do not signal to the real world that they are AI, so there’s no way to know if you are dealing with a human or a bot.  “Most agents do not disclose their AI nature to end users or third parties by default,” they noted. Disclosure, in this case, would include things such as watermarking a generated image file so that it’s clear when an image was made via AI, or responding to a website’s “robots dot txt” file to identify the agent to the site as an automation rather than a human visitor…”

See also Gizmodo – New Research Shows AI Agents Are Running Wild Online, With Few Guardrails in Place. And this research was conducted before OpenClaw unleashed a monster.