--- title: "Echoes" canonical: "https://current.tinyfish.ai/issue/35/echoes" publication: "TinyFish" publisher: "TinyFish" language: "en-US" guide: "https://current.tinyfish.ai/llms.txt" permalink: "https://current.tinyfish.ai/issue/35/echoes" issue: 35 section: "echoes" description: "Past infrastructure decisions echoing in today's production realities" authors: ["Nora Kaplan","Rina Takahashi"] published: 2026-06-29 updated: 2026-06-25 articles: 15 --- # TinyFish > CURRENT is a journal about AI agents in production, for the engineering and product leaders who have to make them work. Drawing on experience building enterprise web agents, it explains why the demo succeeded and the deployment didn't, and what that means for choosing vendors, briefing the board, and avoiding mistakes others have already made. [Read on the website]() ## Issue 35 — Echoes Past infrastructure decisions echoing in today's production realities ### Anchor Essay - [What the Click Was Holding Together]() — By [Nora Kaplan]() · Published 2026-06-24 · Format: Anchor Essay A mouse click is four assertions compressed into one gesture: I'm here, I see what I'm doing, I have the authority, and I mean to do it now. Nobody needed to name those components separately, because a person was always holding them together. Audit logs, session tokens, approval workflows — all built on the assumption that the click was self-interpreting. Now software can reproduce the gesture perfectly while the meaning doesn't arrive with it. The screen can operate. It cannot testify. ### CAPTCHA Sidebar - [The Checkbox That Can't Testify]() — By [Rina Takahashi]() · Published 2026-06-25 The W3C defines CAPTCHA as a "[Completely Automated Public Turing Test](https://www.w3.org/TR/turingtest/)," built to tell computers and humans apart. That framing made sense when the threat was a script trying to scrape a form or stuff a ballot box. Human or not. Binary gate. ### Imagined Operator - [The 3am Screenshot That Revealed the Bot Was Never Really Inside the System]() — Published 2026-06-25 *Deb Kowalski led the RPA Center of Excellence at a large Midwest insurer from 2018 to 2021. She started in claims processing and got promoted into automation because she understood the workflows better than anyone in IT. She spent the next three years discovering what that knowledge was actually worth when the bots stopped working.* ### Mechanics and Money - [The Click Was Never Simple]() — By [Rina Takahashi]() · Published 2026-06-25 · Format: Mechanics and Money Playwright's auto-waiting documentation lists five preconditions that must be satisfied before a click executes. Attached. Visible. Stable. Receiving events. Enabled. A person resolves all five in a glance without noticing. Written out for a machine, they read like a catalog of everything that's ever gone wrong with a button. - [Money Complains in Structured Formats]() — By [Rina Takahashi]() · Published 2026-06-25 · Format: Mechanics and Money Visa, Mastercard, and Stripe are building agent payment infrastructure. The revealing detail is what happens when a purchase goes wrong. Chargebacks demand structured evidence, and structured evidence forces a distinction most web automation has never needed: the difference between performing an action and being authorized to perform it. ### Further Reading - **RFC 9309 — The Robots Exclusion Protocol** — [Source]() — Published 2026-06-25 The full text of the standard includes a line worth memorizing: its rules "are not access authorization." That single caveat, baked in from the beginning, now sits at the center of every AI data-licensing dispute. - **Ironies of Automation — Lisanne Bainbridge (1983)** — [Source]() — Published 2026-06-25 Written in 1983, five pages long, and still the sharpest description of what happens when you automate the easy parts: the human inherits the hardest residual decisions with the least context to make them. Every AI approval button is a case study waiting to be filed here. - **Visa Plugs Its Payment Network into ChatGPT** — [Source]() — Published 2026-06-25 AP's reporting on the first major payment network building agent recognition into existing card rails. Read it for the Forrester analyst who notes, almost in passing, that dispute protocols for agent-initiated purchases don't actually exist yet. - **Consent in Crisis: The Rapid Decline of the AI Data Commons** — [Source]() — Published 2026-06-25 Longpre and colleagues audited 14,000 web domains and found robots.txt files contradicting their own sites' Terms of Service at remarkable scale. A detailed look at what happens when a voluntary signaling protocol gets pressed into service as legal consent. - **Playwright Documentation — Auto-waiting** — [Source]() — Published 2026-06-25 Five conditions a programmatic click must satisfy before it fires. A surprisingly readable catalog of everything that goes wrong between "the element exists on the page" and "someone actually clicked it." - **OWASP Non-Human Identities Top 10 (2025)** — [Source]() — Published 2026-06-25 When software agents use machine credentials, audit logs lose the ability to tell who actually acted. OWASP names this session-attribution gap as a live security vulnerability, which gives the identity question real teeth. ### Past Articles - [The Screen Scraping Cycle]() — By [Rina Takahashi]() · Published 2026-06-19 · Format: The Standard and the Cycle In 1986, IBM shipped a tool that let programs read characters off a terminal screen because mainframe applications had no APIs. The assumption was that this was temporary. Forty years and several technology generations later, browser agents automate the web using the same basic logic: parsing whatever the human sees. Each generation believed it was building a workaround. Each time, the workaround became infrastructure. - [The W3C Moment]() — By [Rina Takahashi]() · Published 2026-06-19 · Format: The Standard and the Cycle In June 2018, the W3C published a spec describing software that "emulates the actions of a real person using the browser." They meant testing tools. That sentence now reads like a product description for AI agents. WebDriver's authors knew they were building something more general than a test harness. They just scoped it as one. The word "primarily" left room for everything that followed. - [The Thread That Runs Through the Browser]() — By [Rina Takahashi]() · Published 2026-06-19 · Format: The Testing Substrate In 2004, a developer at ThoughtWorks wrote a JavaScript tool to stop his colleagues from manually clicking through a billing app. He named it Selenium, as a joke. Twenty-two years later, AI agents open browsers using protocols descended from that tool, reading page structures originally built for screen readers, deciding what to do on sites they've never encountered. Every layer of browser automation was a reasonable response to the problem directly in front of it. The problem in front of it kept quietly changing. - [The Organizational Inheritance]() — By [Rina Takahashi]() · Published 2026-06-11 · Format: Two Kinds of Debt RPA's governance problems didn't arrive all at once. They accumulated quietly: orphaned bots running on departed employees' credentials, exception-handling logic that lived in one person's head, audit trails nobody maintained. The questions were always answerable. Who owns this? What happens when it fails? Organizations often didn't ask until something broke. AI agents face the same questions now. The teams deploying them are rarely the teams that lived through the answers. ## Other sections in Issue 35 - [Daily Brief]() - [Market Pulse]() - [Foundations]() - [Practitioner's Corner]() - [Vision]() ## More - [Publication guide]() - [Issue archive]()