The Global Race to Govern AI Agents Has Begun

In late January 2026, a startup CEO launched a Reddit-style social network called Moltbook — exclusively for AI agents. Within days, it claimed 1.5 million autonomous agents posting, commenting, and upvoting [1] . OpenAI founding member Andrej Karpathy initially called it “the most incredible sci-fi takeoff-adjacent thing I’ve seen recently.” Then security researchers at Wiz found an exposed database API key on the front end of the site — granting full read and write access to the entire production database, including 1.5 million API authentication tokens and 35,000 email addresses [2] . Karpathy reversed course: “It’s a dumpster fire. I definitely do not recommend people run this stuff on their computers.” Moltbook is not an edge case. It is a preview of what happens when autonomous AI agents operate without governance. And the timing is striking: the very same week Moltbook went viral, Singapore’s Infocomm Media Development Authority (IMDA) released the world’s first governance frame