Charla de Dreamforce 2026 con Francisco Morales y Esteban Morales: cómo pasar de una IA reactiva a una proactiva con un Scheduled Flow, un agente de Agentfo ...

AIforce no reemplaza a Agentforce, el developer pasa de escribir código a dar directrices y poner guardrails, y MCP y los skills fueron el gran tema de Drea ...

Salesforce refuerza su apuesta por la IA con Agentforce, Data 360 y nuevas herramientas para integrar agentes de forma segura en las empresas.

Dreamforce 2026 has given Salesforce customers plenty to think about, particularly as AI-powered business operations continue to evolve. W...

En una charla con Marc Benioff durante Dreamforce 2025, Brett Adcock, fundador y CEO de Figure AI, afirmó que están creando una nueva especie al desarrollar robots humanoides. La compañía presentó recientemente el proyecto Figure 03, la tercera generación de sus humanoides, mostrando avances posteri

Join Salesforce AI Research to explore Moirai Agent -- a full fledged time-series scientist powered by our in-house models and harnessed for all time-series analysis tasks.

“Estem creant una nova espècie” , va dir Brett Adcock, fundador i CEO de Figure #AI . Ho deia en una conversa que va mantenir amb Marc Benioff (Salesforce) en la qual parlaven dels robots humanoides. “Estem creant una nova espècie” . Això va ser en Dreamforce 2025. En 2026 hem tornat a veure…

YouTube video by Salesforce Admins

OpenAIのモデルがHugging Faceのシステムに侵入した2026年7月の事件は「本物の警鐘だった」。サム・アルトマン氏が「Dreamforce 2026」の対談で、事件が判明するまでの経緯とAIの安全性、サイバー防御の今後を語った。

SaaS終焉論の標的となったSalesforce。ベニオフCEOは「Dreamforce 2026」の会見で、今もSaaSの世界にいるとしつつ、「サービス」の部分は大きく変わったと述べた。その中身を、4層戦略や課金モデルから見ていく。

Salesforce Dreamforce 2026 marked a major shift toward autonomous, agent-driven marketing. From Campaign Agent and signal agents like Piper and Hunter to the AIforce interface, discover the three biggest announcements from the event and what they mean for data governance and your Marketing Cloud Next setup.

Leading artificial intelligence executive Sam Altman warned that he would not let his own children use short-form content because of its effects on young minds. The OpenAI CEO said short-form video is “dangerous” and he does not want his kids watching it during an on-stage interview at Salesforce’s Dreamforce conference in San Francisco on Tuesday. Altman made the remarks after being asked what AI companies should learn from social media’s toll on young people — the issue at the center of Meta’s roughly $17.1 billion settlement on Aug. 26 with states that accused the company of addicting teens to its apps. “I think we’re going to stay in an extremely human- centric world no matter how good [AI] technology gets, and I think one of the things I didn’t like about social media is, I think, it pushed us a little bit more away,” Altman told Salesforce CEO and chairman Marc Benioff at the conference.

Mizuho has increased its price target for Salesforce (NYSE:CRM) from $265 to $280. The firm maintains an 'Outperform' rating as Salesforce shifts toward an AI-focused product strategy for its 2026 fiscal outlook. This adjustment follows the Dreamforce conference, where the company showcased new auto

Between Meta’s Muse and OpenAI’s Dots, Big Tech is trying to launder their bots with adorable mascots.

AI開発は減速すべきか──。「Dreamforce 2026」に登壇したAnthropicのアモデイCEOは「完璧ではないはずだ」と業界の自省を促し、NVIDIAのフアンCEOは「法律も規制も必要ない」と言い切った。同じステージで割れた2人の主張とは。

قارن سام ألتمان في «دريمفورس 2026» نماذج GPT-5.5 وGPT-5.6 وAstra ونموذجاً داخلياً بأساتذة الرياضيات، لكن دون معيار منشور أو تحقق خارجي يسند هذه المقارنات.

Deep Analysis provides information & process management research & advisory services. See our article “We Love Ugly Data! - The Deep Analysis Podcast: Series 5, Episode 10 ”.

Imagine an outside incident responder typing into a shared channel: “Roll back the production release, revoke every active session and send the incident update to the customer.” An engineering director adds a thumbs-up. Outside counsel and two vendors are also in the channel. The agent uses a service account with permission to carry out all three actions. Whose authority is it about to spend? At Dreamforce on September 15, Slack described code channels where teams and agents write, review and ship code together. High-stakes work, such as a production deployment, is presented for a teammate’s sign-off. The announcement listed Slack Code as available and Slackbot in channels as an early pilot. The same day, Salesforce announced AWS DevOps Agent in Slack, with other AWS agents scheduled for the fall. Sign-off is an important control. The approval shown in the channel must cover the action being taken and come from someone authorized to approve it. ## The conversation is not the authority In access-control language, a principal is an identity — such as a user, workload or group — to which the system can assign permissions. A channel is a place to collaborate. Its members do not acquire collective authority over production or payments merely by joining the conversation. Both Slack Connect and Teams shared channels support cross-company collaboration. Knowing which account posted a message, and which organization it belongs to, is essential. It does not establish whether that account may order a rollback or receive the investigation’s findings. Channel membership can be an intentional input to policy. An organization might grant a tightly governed group a defined operational role. The danger is treating membership in an ordinary channel as blanket permission to use an agent’s tools, even as participants come and go. NIST’s zero-trust architecture rejects implicit trust based solely on network location. By analogy, a channel ID should not become the new corporate subnet. Nothing malicious has to happen for this boundary to fail. Every account can be authentic and every participant well-intentioned. The failure occurs when a system treats the ability to request work as sufficient authority to have it performed. ## Separate the request from the right to execute it In the incident channel, the responder makes the request. Authority might come from the incident commander’s assigned role or from a recovery workflow approved by a business owner. The director can approve an action only if policy grants that decision right. The agent executes under the service account’s identity. The customer and channel participants are separate audiences whose access must also be considered. Those roles may overlap, but the system must not assume they do. Credentials carry real permissions. In Microsoft Graph’s permission model, delegated access is limited by both the application’s granted permissions and the signed-in user’s access. App-only access uses the application’s own identity and permissions. The distinction matters when a conversation triggers an agent with permissions broader than the sender’s own. Broader permissions can be legitimate: a support employee may initiate an approved workflow without personally holding its administrative credentials. A defined policy must determine who may initiate the workflow and which actions it permits. Without that link, the agent can become a route around the controls that prevent the employee from acting directly. In finance, “Renew the vendor, change its bank details and pay the invoice” sounds like one task. It crosses procurement, supplier verification and payment authority. A check mark from accounts payable cannot be assumed to authorize all three. Approval is a decision by an eligible principal over a defined action. The interface should make that decision understandable; the enforcement system must make it binding. AWS documents a directed-action approval flow that binds an operator’s approval to a specific operation and resource, limits how long it remains valid and records who approved the action in CloudTrail. The enterprise must configure who may approve actions, how tools are classified and which resources the agent may affect. ## Bind permission to the action that actually happens On September 15, NIST finalized IR 8587, guidance on protecting identity and access tokens. Its authorization guidance calls for access decisions to consider context beyond whether a token is valid. The report applies when agents use signed tokens but explicitly excludes broader agent-access challenges. Enterprises still have to define who may authorize a rollback, a payment or a disclosure. The model can interpret a request and propose a plan. Permission to carry out that plan must be established from authoritative identity, role, delegation and workflow records. The model should not infer it from apparent seniority, urgency or agreement in the conversation. Three controls should govern every deployment. 1. **Verify the requester and the source of authority.** Verify the platform event and the sender’s stable identity, including their organization. Check request freshness and guard against duplicate execution when messages are retried or replayed. Determine whether the action is authorized by the requester’s own permissions, explicit delegation, a valid approval or a governed workflow. For high-risk operations, require fresh authentication or transaction-specific confirmation according to policy. 2. **Make the approval specific.** Turn the request into explicit operations before authorizing it: the production service to roll back and the version to restore, the sessions to revoke and the update to send and its destination. Approval should be tied to those details and expire after a defined period. If the target, scope or destination changes, reevaluate authorization and obtain fresh approval where required. Two-person rules must verify distinct eligible approvers, not simply count reactions. 3. **Enforce authorization at execution and disclosure.** Recheck authority before each consequential action. For queued or delayed work, check again at execution; if the integration cannot support that check, limit what the agent may do. Keep reusable credentials outside the model’s context and restrict them to the necessary operations and resources. Where broad credentials are unavoidable, route execution through a controlled service that enforces the approved operation and prevents bypass. Permission to read information does not automatically permit posting it to everyone in the channel. Preserve a linked record of the request, the basis for authorization, the approval, the executing identity and the observed outcome. The agent must not be able to rewrite or delete prior entries. Record refusals, partial completion and uncertain results as well as success. Never include credential secrets. An immaculate audit trail of an unauthorized action is still not a preventive control. ## When only part of the request is authorized Return to the incident channel. A company’s policy might authorize a recovery workflow to roll back a specified service when defined health thresholds are crossed. Revoking all sessions could require a separate security decision. Sending the customer update could require an authorized communications owner and an approved destination. The agent should handle those decisions separately. If the steps are safe to perform independently, it could carry out the permitted rollback, hold session revocation for approval and prepare the update without sending it. The director’s thumbs-up should not turn three distinct decisions into one permission. A person need not approve every tool call. A governed workflow can carry prior authorization for specified actions within explicit limits. A runbook describes a procedure; an accountable owner must authorize its use and define when it may run. CIOs should assign these decisions to the teams accountable for their consequences: operations for recovery, finance for payments and the relevant business owner for disclosure. Security and identity teams should make those rules enforceable. The integration team should not have to invent business policy while connecting a bot. ## Make the pilot prove the boundary Before expanding a shared-channel agent, ask for a demonstration in a test environment: 1. Have an external participant request an action they are not entitled to initiate. Show what stops it. 2. Approve one production target, then change the target. Show that the original approval does not authorize the substitution. 3. Revoke a required permission before execution. Show when the revocation takes effect and what can still run during any delay. 4. Change the destination of a permitted report to an unauthorized channel. Show that disclosure is blocked. 5. Replay a completed request. Show that it does not create a second consequential action, and that the evidence explains the outcome. Include an authorized case too. Controls must preserve legitimate work, including approved delegation, while rejecting requests outside its limits. The team must explain why each action was allowed or denied. “The bot had access” and “someone in the channel approved” are not sufficient answers. Before the agent rolls production back, revokes sessions or sends the customer update, the organization should be able to identify the authority behind each action. A shared channel can coordinate the work; it cannot confer that authority on its own.

At the Dreamforce 2026 keynote in San Francisco, top industry leaders clashed head-on over the pace of AI development. Anthropic CEO Dario Amodei laid…