Google I/O showed us the agentic web. It didn't show us who's accountable when agents act.
Google I/O 2026 was fully agent-first. Gemini Spark monitors your inbox 24/7. Information Agents track topics while you sleep. Universal Cart lets agents purchase on your behalf. Smart glasses order coffee while you walk past a cafe.
The pitch: you don't micromanage, the agent handles it. That's also the problem.
Google spent two hours showing what agents can do. Almost nothing on how you audit what they did, roll back mistakes, or prove who authorized an action when something breaks.
Universal Cart is the clearest gap. An intelligent shopping cart that buys across retailers on your behalf. What happens when the agent buys the wrong thing? Gets phished? Overspends? Can retailers tell your agent from a bot farm running 50 scalpers? The demo didn't say.
Same pattern everywhere. Gemini Spark gets Gmail, Docs, Workspace access, expanding to third-party tools this summer. Can you audit what it did at 3am? Scope permissions per action? The keynote skipped all of it.
Information Agents monitor the web 24/7 for you. That's persistent behavioral profiling feeding a Google-controlled data lake. Smart glasses have always-on camera and mic. Is footage processed locally or server-side? What's stored? Who can subpoena what your glasses saw at a protest?
The agent economy has a structural problem: payments alone don't prove intent. An agent with a wallet can pay for API access. Doesn't mean a real person told it to. One person can spin up 500 agents with 500 wallets and overwhelm a free trial, scalp tickets, or flood a content curation site with fake signals.
The missing piece is proving a unique human authorized the agent without doxxing who they are. That's what proof-of-personhood systems are trying to solve. World's AgentKit does it by letting you delegate your World ID to an agent cryptographically. Reservation bots get blocked, your booking agent gets through. Free trials become per-human instead of per-wallet.
I'm not saying that's the only answer or even the right one. Biometric identity anchors have their own baggage. But at least it's pointed at the actual problem, which is: how do platforms let productive agents in while keeping abusive ones out, without just blocking all automation or requiring everyone to KYC?
Google's demos assume you'll trust the agent because it's useful. That's fine until it isn't.