The Brief · Issue 11

Week of 7 September 2026 — governed agents and a stickier CPI

Alteryx ties AI agents to governed business logic, Delaware tightens its privacy law, and August inflation came in hotter than July.

September 22, 2026

Compiled on 22 September 2026 for The Brief's launch archive, from sources published between 7 and 13 September 2026.

Four stories that mattered

Alteryx ties AI agents to governed business logic, not raw data access

Alteryx's Summer 2026 release added five pieces aimed at the gap between enterprise-governed analytics and the AI agents employees increasingly reach for on their own: an enhanced natural-language interface ("Ask Alteryx") that queries Snowflake, BigQuery and Databricks and generates workflows automatically; Agent Studio, for building conversational agents from existing datasets without rebuilding the underlying logic; a ChatGPT plugin that exposes analyst-approved data inside ChatGPT itself; an MCP server letting external AI agents build, run and schedule Alteryx workflows under inherited security controls; and a GitHub-based "Skills" toolkit teaching third-party AI tools to construct valid Alteryx assets. Alteryx cited its own research that 71% of IT leaders say AI initiatives succeed only when IT and business teams work together to bridge agents and business logic, and claims token-cost reductions of up to 93% from routing agent queries through governed workflows rather than raw data.

The pattern worth watching, here and across the category, is vendors racing to be the governed layer between employees' own AI tools and the company's actual data, rather than trying to keep employees inside a single proprietary interface.

Source: Alteryx, Alteryx Launches New AI Capabilities to Bring Governed Analytics Anywhere Work Happens

Delaware significantly tightens its consumer privacy law

Governor Matt Meyer signed HB 380, which lowers the Delaware Personal Data Privacy Act's applicability threshold from 35,000 to 10,000 Delaware consumers (5,000 for businesses deriving more than 20% of revenue from selling personal data), extends obligations to third parties that acquire data from controllers, and broadens "sensitive data" to include national origin, certain health information, neural data, financial account credentials and government ID numbers. A companion bill, HB 381, tightened data-breach notification rules and took effect immediately on signing; HB 380's changes take effect 1 January 2027.

For any team running analytics on US consumer data, the lowered threshold is the operative detail: businesses that assumed they were too small to be in scope for state privacy law should check the new numbers, not the old ones.

Source: IAPP, Delaware enacts HB 380: Key updates to the Delaware Personal Data Privacy Act

August inflation ran hotter than July, driven by gasoline

The Consumer Price Index rose 0.4% in August, up from 0.1% in July, while the year-over-year rate held at 3.4%. Core CPI (excluding food and energy) rose 0.3% for the month and 2.4% over the year, down slightly from July's 2.5% annual core rate. Gasoline jumped 3.9% for the month and accounted for more than a third of the total monthly increase; energy overall was up 16.3% year over year. Airline fares rose 2.7% on the month and 23.4% over the year, while motor vehicle insurance and medical care services both fell slightly.

The divergence between a flat-ish core rate and an energy-driven headline number is the detail worth putting in front of anyone reading only the 3.4% headline: the underlying trend moved less than the topline suggests.

Source: Bureau of Labor Statistics, Consumer Price Index — August 2026

Tool moves

One how-to

A checklist before you let an AI agent touch governed analytics. This week's Alteryx release is one of several vendors building a governed layer between employees' own AI tools and company data. Whichever tool you use, the underlying questions are the same:

  1. Does the agent inherit role-based access control and row-level security, or does it run with its own service credentials? An agent that queries a warehouse with a broad service token can surface rows a human user would never be allowed to see.
  2. Is there a semantic layer between the agent and raw tables? Agents that write their own SQL against physical tables will quietly re-derive metrics that already exist, and get them wrong.
  3. Can you trace an answer back through data lineage? If an agent's output cannot be traced to the query and tables it came from, you cannot debug a wrong answer or defend a report in an audit.
  4. Who owns the governance policy once agents can write, not just read? Several of this week's releases let agents schedule and run workflows, not just answer questions — which means agent permissions need the same change-control review as a new employee's, not a lighter one.

None of this is unique to any one vendor. It is the same access-control discipline analytics teams already apply to human users, extended to a class of user that can act faster and less predictably than any employee.

One number

5.4%. That is how much the Producer Price Index for final demand rose over the 12 months ended in August 2026, with the index itself up 0.4% for the month, according to the Bureau of Labor Statistics. PPI measures prices businesses receive for their output, and because those cost changes often reach consumers later, it is watched as a leading indicator for future CPI readings. What it does not tell you: PPI is volatile month to month, goods and services can move in very different directions (final demand goods rose 1.1% in August versus 0.1% for services), and a rise in producer prices does not guarantee retailers pass the full increase on to consumers.

Source: Bureau of Labor Statistics, Producer Price Index — August 2026

Get the next one