Salesforce Pushes Agents Into CRM Workflows as NIST Turns to Identity Controls

Salesforce’s Winter ’27 release positions AI agents to qualify sales pipelines, resolve service cases, book appointments and underwrite risk. Once software can carry a workflow across CRM, collaboration tools, voice and older enterprise systems, the hard question is no longer only whether its model can reason: it is what the agent is allowed to do, on whose authority, and how its actions are checked.

Salesforce says its agents can use governed CRM data while operating through Slack, Microsoft Teams, voice and legacy systems. That design turns an agent from a chat interface into a connected workload: it can draw context from a system of record and act through multiple channels. Salesforce also reported that its Adaptive Experiences & Dynamic Plans capability is in production at four customers, including PowerSchool with more than 550 users.

The control plane moves alongside the agent

NIST’s Center for AI Standards and Innovation has announced an AI Agent Standards Initiative intended to support trust and interoperability. Its early work is security-heavy: a request for information on AI-agent security sits alongside a draft concept paper on software and AI-agent identity and authorization.

The mechanism is straightforward. A workflow agent needs an identity that connected systems can recognize, permissions that limit its actions, and records that let operators reconstruct what happened. NIST’s focus does not settle how those controls will work, but it signals where emerging standards work is concentrating as vendors push autonomy deeper into business software.

1,700%Growth in daily AI-agent requests

Cloudflare reported that daily AI-agent requests on its network increased 1,700% between June 2025 and May 2026. It also estimated that more than half of internet traffic is non-human.

Up to 450%More traffic per task in Cisco tests

Cisco testing cited by Cablefax found that agents can generate up to 450% more total traffic per task than humans.

Learning in production changes the release process

CoreWeave has launched unified agentic AI capabilities that connect training, inference, observability and reinforcement learning in a production feedback loop. Observability is the ability to trace and inspect what a system did. In this model, it is not merely a diagnostic tool: it is part of the proposed route for finding failures and preventing regressions as agent workflows change.

CoreWeave says its Serverless RL approach can cut costs by up to 40% and increase training speed by about 1.4 times without sacrificing quality. Those are company-supplied performance claims, rather than an independent measure of reliability in enterprise deployments. The more consequential operational implication is that a system designed to improve while handling production work needs explicit tests and gates before altered behavior reaches sensitive workflows.

Automation also becomes a network load

The infrastructure signal is broader than Salesforce’s product release. Plume found that 22% of active Plume-enabled homes had regular large-language-model traffic in April, up from 19% a year earlier. Among homes with that traffic, it measured roughly 2,000% year-over-year growth in associated data volume and a 364% increase in time connected.

Three questions for a workflow-agent rollout

• Can each agent receive a distinct identity and narrowly scoped permissions across the CRM, ticketing and scheduling systems it can reach?
• If the vendor continuously tunes or learns from production activity, what traces, evaluations and regression gates identify changed behavior before it affects a live workflow?
• For voice, contact-center and remote-user deployments, how much upstream bandwidth and latency headroom is needed if automated tasks create more sustained traffic?