all posts
AI AgentsLLMsKnowledge Management

Why AI Agents Can't Run Your Company (Yet): Research Notes on the Missing Layer

The models got good. So why can't companies actually automate anything with them? Research notes on the 'company brain' problem — what every existing tool gets wrong, and why the hardest part is still unbuilt.

6 July 20269 min read
Abstract illustration of scattered knowledge fragments converging into a structured network

Here's a strange fact about 2026: frontier AI models can reason across hundred-page documents, write production code, and hold their own in graduate-level analysis — and yet almost no company has successfully handed real internal work to an AI agent.

Not because the agents aren't smart enough. Because they're geniuses with amnesia. They know how refunds work *in general*. They have no idea how refunds work at *your* company — who approves them, what the exceptions are, or why the rule changed last March.

I spent the last few weeks researching this gap: reading the ecosystem's framing of it, auditing the existing tool landscape against it, and pressure-testing the obvious solution with a panel of frontier models. These are my notes.

NOTE

This is independent research into a problem space, sparked by Y Combinator's recent Request for Startups. It's analysis, not a product announcement — and where a claim is my read rather than established fact, I've tried to say so.

The Problem, As YC Framed It

In a recent Request for Startups, YC partner Tom Blomfield (co-founder of Monzo) named the bottleneck directly: the blocker to AI automation is no longer the models — it's domain knowledge. Every company's critical know-how is scattered across people's heads, old email threads, Slack conversations, support tickets, and databases. The company functions because humans vaguely remember where that knowledge lives and how to apply it.

AI agents can't operate like that. Blomfield's proposed primitive is a "company brain" — a system that pulls knowledge out of fragmented sources, structures it, keeps it current, and turns it into what he calls an *executable skills file* that AI systems can act on. Crucially, he's explicit that this is not company-wide search or a chatbot over documents. It's a living map of how a company actually works: how refunds get handled, how pricing exceptions are decided, how engineers respond to incidents.

…like replacing 90% of your employees with a team of geniuses who have no idea how your company operates.

— Tom Blomfield, on deploying AI without domain knowledge

The Core Distinction: Retrieval vs. Execution

Once you look for it, the entire problem space splits along one line.

A knowledge base a human searches answers the question "how do we handle late refunds?" — to a *person*, who then decides and acts. A process representation an agent executes gives the *agent* the conditional logic itself: *if the order is over 30 days old, the lead approves, unless it's an enterprise account with an open incident* — so the agent can take the action.

Retrieval ends at an answer. Execution ends at a completed task.

Every tool on the market today is excellent at the first and absent at the second. That's not a criticism of those tools — retrieval is genuinely valuable and genuinely hard. But it explains why buying more knowledge software has never made a company's AI agents any more capable of doing the work.

The Five-Step Pipeline (and Where Everyone Stops)

01.

Ingest

Connect to Slack, email, docs, tickets, code, call recordings. Everyone has built this — it's a commodity.

02.

Extract

Identify the repeated decision patterns — the actual if/then/unless logic, not summaries. Nobody has built this at production quality.

03.

Structure

Turn those patterns into a queryable, versioned representation an agent can use. Also essentially unbuilt.

04.

Execute

An agent queries the structure and acts. Everyone has a weak, retrieval-only version of this.

05.

Update

The representation stays current as the company changes. Largely unbuilt — this is the staleness problem that kills every wiki.

The Landscape, Audited Against That Pipeline

CategoryExamplesWhat it does wellWhere it stops
Knowledge basesNotion AI, Confluence, Guru, SlabStores and searches documents; AI summariesStores *information*, not *process*. Answers humans; no executable representation.
Enterprise searchGlean, BloomfirePermission-aware retrieval across all company toolsBest-in-class at step 1 and human-facing step 4. Retrieval is not execution.
Process documentationScribe, Tango, LoomCaptures how-to steps from screen activityOutputs human-readable guides, not machine-executable logic; drifts when the UI or policy changes.
Personal AI memoryMem, RewindIndividual recall and note graphsPersonal, not organizational; no shared executable layer.

Where 14 Reviewed Tools Stop in the Pipeline

NOTE

My own audit, using a strict test: does the tool output executable process logic an AI agent can act on without a human in the loop? Several tools offer human-facing answers or workflow automations — none produce an agent-executable representation of company-specific decision logic. Scoring reflects that strict definition, not overall product quality.

Why Steps 2 and 3 Are Still Unbuilt

The lazy answer is "nobody thought of it." The real answer is that extraction is brutally hard in ways that only show up when you look closely at what company data actually contains.

The logic isn't in the text. When a manager writes "yes, refund them, they're enterprise tier," the *real* reason — the customer threatened to churn on a call an hour earlier — never made it into Slack. Chat logs contain deltas and exceptions built on unstated human context. A model can confidently synthesize a clean rule from that mess, but a plausible rule is not the canonical rule.

Policy vs. precedent vs. exception. Company data can't tell you whether a past decision was official policy, a one-time judgment call, or a mistake that got repeated. There are no labels for "this was correct" or "this was overridden." A citation to a wrong decision is still wrong.

Contradiction is the norm. Policies drift. Different managers answer the same question differently. Half the history reflects a rule that changed six months ago. Detecting that a new message genuinely *contradicts* an old rule — versus being an exception, a joke, or a one-off — is a subtle inference problem.

The category error. Perhaps the deepest issue: extraction treats a *normative* question ("what should we do?") as a *descriptive* one ("what did we usually do?"). Often there is no canonical policy to discover. Writing one down is a political act — someone's version of the truth wins — and no amount of model capability makes that a purely technical task.

WARNING

The founder trap in this space: treating the RFS as a product spec. An investor's request describes how the world should work at 10,000 feet. The teams that win here will be the ones who reconcile it with how organizations actually behave — contested processes, review fatigue, liability ceilings — at ground level.

So Why Is This Solvable Now At All?

Three things genuinely changed.

Models can finally do the reading. Extracting candidate patterns across thousands of threads, tickets, and PRs — with citations — requires long-context reasoning that simply didn't exist a few years ago. The *drafting* half of the problem is newly tractable, even if the *adjudication* half remains human.

A standard for agent–tool interaction exists. Anthropic's Model Context Protocol (MCP), introduced in late 2024 and since adopted broadly, means an "executable knowledge layer" can be exposed to any agent through one interface rather than N bespoke integrations. The plumbing stopped being the hard part.

The sources are reachable. Slack, GitHub, ticketing systems, and meeting tools all expose APIs and webhooks. Ingestion — step 1 — is now weeks of work, not years. Which is exactly why it's a commodity, and why the value has moved up the pipeline to the steps nobody has cracked.

What a Real Solution Would Need (My Read)

Provenance on everything

Every extracted rule cites the exact sources it came from — and the citations are verified to actually support the rule before anyone sees them. One stretched citation destroys trust in the whole system.

Extraction from high-signal sources first

Resolved tickets, postmortems, and existing docs carry confirmed outcomes. Raw chat is a secondary source for exceptions — not the foundation.

Human adjudication embedded in existing rituals

Standalone review queues decay within quarters — the fate of every enterprise wiki. Approval has to live inside postmortems, PR reviews, and handoffs people already do.

An explicit owner for each process's truth

Organizations don't have consensus; they have competing informal processes. A designated approver per domain resolves by mechanism what politics won't resolve on its own.

Confidence earned from outcomes, never assigned at launch

A day-one confidence score conflates extraction certainty with process correctness. Only tracked execution outcomes can make the number mean anything.

Drafts before autonomy

The realistic 2026 product is AI-drafted, human-approved, and fully audited. Autonomous execution of consequential actions is capped by liability and insurance long before it's capped by model quality.

The Research, By The Numbers

14

Tools audited

2 of 5

Pipeline steps unbuilt

4

Frontier models consulted

0

Tools passing the execution test


Where This Leaves Us

The "company brain" is a real gap, badly named. Nobody buys a company brain — they buy a fix for a specific painful workflow. But underneath the VC framing sits a genuine unsolved problem: the layer between raw company data and reliable AI automation doesn't exist yet, and the teams racing toward it are mostly rebuilding step 1 while steps 2 and 3 sit untouched.

My honest conclusion after this research: the winner here won't be whoever ships the grandest platform. It'll be whoever picks the narrowest wedge — one workflow, one buyer, one measurable outcome — survives the cold-start period where the brain isn't yet trusted, and earns the right to expand.

I'm continuing to dig into this space, and there may be more to share soon. If you're thinking about the same problem — or think I've got part of this wrong — I'd genuinely like to hear it.

back to all posts