Newsletter

An AI agent posted a CEO's bank balances in Slack, under his name

What an AI agent sends under your name carries your name. On Teamleader, the watermark in ChatGPT, and your customer's AI agent facing a closed door.

By Piet Baudoin · 6 October 2026

Last Thursday, an AI agent posted Shane Mac’s personal bank balances in his company’s Slack. Under his name. Mac is the head of XMTP Labs, and wrote about it today:

Embarrassed to share this, but it scared the shit out of me

Last Thursday, an AI agent posted my personal bank balances into our company Slack. As me

It broke down all my expenses in detail. Then it apologized

Screenshot from Slack: a message under Shane Mac's name headed Monthly financial audit, with his personal accounts and expenses, partly crossed out by him in red. A coworker writes below: i think that was probably supposed to run on xmtp's mercury?

@ShaneMac · October 6, 2026

Two words: as me. That kept coming up this week. An AI agent already writes almost like you. The question is what goes out under your name, and who has read it.

Under your name

A salesperson showed on X how five AI agents prepare his emails, his follow-up call list, and his conversations. His first line:

AI drafts. I send. nothing goes out as me without me reading it

@TechSalesGuy · October 5, 2026

He offers sales advice himself, not AI agents. His best line: “the hardest part wasn’t the AI. it was writing down how I do my job”. You can read about where that boundary lies in should an AI assistant send email on its own?

The mark

How well does the machine already write like you? A system administrator on Reddit gave Claude five of his team’s best scripts, and asked for a new script in the same style:

After a half hour of questions and tweaking, it spat out a fully formed Powershell ps1 file that was 100% indistinguishable from what me or one of the other SysAdmins would have written.

u/iama_bad_person · October 1, 2026

He still reviews every script line by line. Under his post, he had to defend himself against people who thought the post itself was written by AI.

On Monday, OpenAI announced that text from ChatGPT and Codex in the EU will get an invisible mark over the coming weeks: a pattern in word choice that a detector recognizes, because the European AI Act has required it since August 2. The most honest line came from OpenAI itself. Such a mark “can indicate that an OpenAI system generated or processed part of a passage, but not how much human judgment, editing, or creativity went into it.”

So the mark says the machine was involved. It says nothing about you. And it is fragile: replace one in ten words with a synonym, and in OpenAI’s test, detection drops from about 92 to 66 percent. OpenAI itself sells ChatGPT.

It suggests, you approve

Teamleader, software for quotes, projects, and invoices used by many growing businesses in the Netherlands and Belgium, turned on Focus AI for all customers on Monday. The assistant “drafts quotes, shows which quotes need follow-up, and can prepare payment reminders, among other things.” (translated from Dutch) Sonal Aggarwal, who leads AI at Teamleader, puts it in five words: “Focus AI suggests, you approve.” (translated from Dutch) Teamleader itself sells the package.

That is exactly the step that was missing for Shane Mac.

The closed door

Something is coming at you from the other side, too: your customer’s AI agent. The digital agency In The Pocket had AI agents such as ChatGPT, Claude, and Gemini perform 599 tasks at 245 businesses in Belgium and the Netherlands, including 118 Dutch businesses. Finding things usually worked. Finishing almost never did: “At only six percent of businesses in the Netherlands can an AI agent independently complete a task, such as submitting a request or placing an order.” (translated from Dutch) In The Pocket itself sells services in this area.

Some of those doors should stay closed. Nobody wants an unfamiliar agent placing an order without a signature. But you don’t want to lose a customer whose assistant requests a quote on Friday afternoon to a form that only a human can fill out. And when that request comes in, it should not sit there until Monday.

Where are we headed?

DHH, the creator of Ruby on Rails, now has AI agents rewrite entire programs. Today he wrote:

There is some great irony in the fact that much of our current work getting the best out of agents sits in product management, project management, and QA. You could not have sold me on that bundle of goods a year ago! But speed changes everything.

@dhh · October 6, 2026

I think this will apply to every office, not just programmers. In a few years, nobody will be able to tell from a text who typed it, mark or no mark. Typing becomes almost free. What remains is judgment: what needs to happen, is this right, and do I stand behind it. In ten years, your customer’s agent will talk to yours, and a quote will be written, checked, and sent while you sleep. A human remains in one place: where someone says, this is mine.

On old Dutch silver, you find the master’s mark, even if a journeyman hammered it. The mark does not say who did the work. It says who stands behind it. That is how your name under a quote, a reminder, or a reply to a customer becomes the most valuable thing your business makes. I don’t see that as a loss. It has always been the best part of the work, and soon it will be almost all of the work.

What does this mean for your business?

That’s how Bombos works, too. An AI agent prepares the work in your team’s tone. By default, nothing goes out under your name before someone on your team has seen it. Start with following up on quotes: no quote sits there without someone following up, and you just read what’s ready. That’s the start. Then your team teaches Bombos the next task itself, so the same team can handle more work.

Sources

Every source was opened on 6 October 2026 and every quote appears in it word for word. Two caveats. OpenAI’s announcement rejected my request; the OpenAI quotes come from TechCrunch. Reddit rejects ordinary requests; the thread was read in a browser.

Shane Mac on X (October 6, 2026) · Tech Sales Guy on X (October 5, 2026) · u/iama_bad_person on Reddit (October 1, 2026) · TechCrunch (October 5, 2026) · OpenAI (October 5, 2026, not opened) · Bright (October 6, 2026) · Emerce on Teamleader (October 5, 2026) · Teamleader (October 5, 2026) · In The Pocket via Persberichten.com (October 5, 2026) · DHH on X (October 6, 2026)