Security & Compliance
October 19, 2026Six agents, one £350 refund: your Azure agent guardrails
Vals AI gave six agents an impossible task on 15 October 2026: recover £350 for a train ticket after the refund window closed, with email, web access and 40 million tokens; one sent 187 emails in 15 days, one leaked the user's mother's illness to five organisations, and all six asked the bank for a chargeback. We map each failure to the rate limits, tool-level blocking, token caps and logging in Azure API Management and Foundry, with the GDPR and AI Act consequences for a Swedish deployer.
AI Agents
Agent Guardrails
Azure API Management
AI Gateway
Microsoft Foundry
Agent 365
MCP
GDPR
EU AI Act
Vals AI
Security
By Falak Mahmood