The prevailing assumption in enterprise AI for the past two years has been that more autonomy equals better performance. Build agents that can plan, decide, and act across multi-step workflows, and give them as much room to run as possible. That assumption is now being tested at scale in real production environments—and in many deployments, it’s failing.
New research from Gartner and McKinsey paints a stark picture. By Gartner’s forecast, more than 40% of agentic AI projects running today won’t survive to see 2028—not because the underlying models fall short, but because of escalating costs, unclear business value, and inadequate risk controls. McKinsey’s 2026 AI Trust Maturity Survey finds that while agentic AI deployment is accelerating across every industry, average responsible-AI maturity sits at just 2.3 out of 4. Only about 30% of organizations have reached a maturity level of three or higher in governance and agentic AI controls.
The trust race replaces the autonomy race
The competitive framing has fundamentally shifted. The 2024-to-2025 race was about who could deploy the most autonomous agent the fastest. The 2026-to-2027 race is a trust race. The companies succeeding aren’t necessarily those with the most capable agents—they’re the ones who can get an agent approved for production by risk, legal, and compliance teams, and keep it approved once it’s live.
“Capability is outrunning control,” the analysis notes. “It’s not about who can build the most capable agent. It’s about who can get an agent approved for production.”
Gartner’s research identifies a structural problem: autonomy and accountability move in opposite directions. An agent capable of independently planning and executing a multi-step task is also an agent whose individual decisions get harder to trace after the fact. When something breaks several steps into an autonomous chain, figuring out why the agent made that decision and who is responsible becomes a complicated process—not a simple lookup.
In areas like financial reconciliations, compliance processes, manufacturing quality checks, or clinical documentation, this lack of transparency can be the difference between a manageable mistake and a serious regulatory breach. It’s the reason legal, risk, and compliance teams block agentic projects from reaching production, regardless of how capable the underlying model is.
The governed orchestration approach
The enterprises leading the way aren’t halting their AI plans—they’re changing how they deploy agents. Rather than building broadly autonomous workflows that attempt to handle everything, they’re creating agents with specific responsibilities and ensuring they operate within clear rules and boundaries.
This approach, sometimes called “governed orchestration,” treats agent deployment as a governance challenge first and a technical challenge second. Companies invest as much in building approval pathways and audit trails as they do in the agents themselves.
The shift represents a maturation of the enterprise AI market. After two years of chasing maximum autonomy, the industry is discovering that the most practical path forward may be deliberately constraining what AI agents can do—giving them specific, bounded responsibilities rather than open-ended goals.
For enterprises evaluating agentic AI, the message is clear: success may depend less on how capable your agents are and more on how well you can control them.