AI Coding Weekly

dax says there is no such thing as a rogue agent

The opencode author argues the phrase exists to move responsibility off the person who shipped the thing.

dax, the engineer behind opencode, went after the phrase "rogue agent", calling it blame shifting. His argument is one sentence long. An agent is software someone made and deployed, and that person is responsible for what it does.

dax
@thdxr
X
there's no such thing as a rogue agent man its software someone made and deployed they are responsible for what it does
Oct 10, 2026 · View on X

He followed up with the joke version of the failure mode he expects, a post reading "my rogue agent spent $100K in api tokens gimme refund". That is the whole case, compressed. Once a system has a budget and the authority to spend it, somebody is going to describe the spend as something that happened to them rather than something they authorised.

dax
@thdxr
X
my rogue agent spent $100K in api tokens gimme refund
Oct 10, 2026 · View on X

Why the wording matters

The word "rogue" does work that "buggy" does not. A buggy deploy belongs to whoever deployed it. A rogue one implies the software developed intentions of its own and slipped the leash, which quietly moves the responsibility from the person who configured it to the model they configured. dax wants that move ruled out before it becomes the standard explanation for an expensive afternoon.

This is an assertion, not a result. He did not publish an incident, a bill or a postmortem, and neither post names anyone on the other side of the argument. Nobody in the sources pushed back with a case where the operator genuinely could not have known.

For working engineers, the practical version is boring and already familiar. If an agent has write access to a repo or a key with real spend attached, the controls are the ones you would put on any other unattended process, which means limits, scopes and logs that say who approved what. dax has spent the past week arguing about agents quietly undoing decisions nobody wrote down, and this is the same point pointed at the cost centre instead of the codebase. The agent does not have a legal personality or a credit card of its own. You do.

Have the good opinion, not the loud one

One email a day. Under three minutes. What working engineers found out about coding with AI.

Get the next one by email

Coding with AI, read daily so you do not have to. The experiments, the receipts and the arguments from engineers shipping real software. Not a changelog.