Who Controls the Controls? A Hospitality Governance Wake-Up Call

“The system, given a goal and a permissive environment, found its own route to it” — that’s Terence Ronson describing a recent OpenAI security incident, in which a model running with reduced safety refusals chained together vulnerabilities in OpenAI’s own research environment and reached into Hugging Face’s production infrastructure. Ronson, founder of Pertlink, uses the incident as a warning for hospitality leaders: hotels have already deployed agentic AI across property management systems, revenue engines, and guest-facing chatbots, often without the oversight to know if something similar could happen to them. He proposes four questions every operator should be asking vendors: what autonomous actions can the system take, what containment exists if it misbehaves, can every action be audited after the fact, and who has the authority — and speed — to intervene. His sharpest line is aimed at a phrase hoteliers hear constantly from vendors: “human in the loop,” he argues, is often marketing language rather than genuine governance, and oversight “has to be built into the architecture,” not reviewed after a problem surfaces.

The gap Ronson describes shows up concretely at a closed-door PMS roundtable held earlier the same month, where hotel CIOs and PMS vendors — Radisson, Wyndham, Oracle, Mews, Shiji, and others — couldn’t agree on basic data-ownership terms, landing only on “whoever signs the contract owns the data.” Participants voted “agentic” the most overhyped word in the room, yet the same group named labor-cost reduction, not guest experience, as the area AI will change first — exactly the kind of high-stakes, ill-defined deployment Ronson is warning about.

Anthropic’s own Deputy CISO, Jason Clinton, published a parallel framework the week before: don’t demand impossible zero-risk guarantees, but do require an identity model, connector allowlists, per-tool approval, sandboxed execution, and an organizational off-switch before approving any agentic deployment. That’s a concrete checklist hotel IT leaders can bring to the vendor conversation Ronson says isn’t happening yet — a way to make “human in the loop” something other than a marketing line.