Congress came back from the long weekend with a bill about AI agents. The Stop Rogue AI Act would direct NIST to develop standards for "deny[ing] or revok[ing] access, actions, and interactions." One word doing the work of at least four very different operations, each with its own failure mode.
A recent preprint tested the easiest of the four — stopping an agent from acting on revoked information — and found none of five memory systems enforced revocation by default. A retrieval filter helped, until a follow-up showed the agent writing its prior conclusion back as a fresh, unmarked record. The filter caught the revoked source but missed reasoning the agent had already derived from it.
And that's the easy one. Canceling accepted-but-unexecuted work requires the counterparty's cooperation; a flight hold lives at the airline. Unwinding a completed payment runs on chargeback clocks you don't set. Containing an irreversible disclosure is a legal problem, not an engineering one.
A standard that treats all four as one operation will cover the flag flip and miss everything downstream.
Stop future actions: Flip a policy flag. But agents can derive conclusions from a credential while it's valid and write those conclusions back as new, unflagged records. Revoke the source and the derivative keeps working.
Cancel accepted-but-unexecuted work: The reservation lives at the counterparty. Visa rules require agentic payment providers to retain order confirmations for 120+ days — the external record outlasts any internal revocation event.
Unwind completed-but-reversible work: Refund and chargeback windows are counterparty-controlled. Under Visa's agentic framework, cardholders bear responsibility for transactions their authorized agent initiated, narrowing the dispute path.
Contain irreversible effects: Under apparent-authority doctrine, a principal can be bound by an agent's actions even when private instructions were narrower than the agent's external behavior suggested. Resolution happens in courts and contracts, on timescales measured in months or years.