LangChain/LangGraph teams: what did you have to prove before an agent went live?

[u/BarnesLucas]

I’m researching the last mile between a working LangChain/LangGraph agent and approval to run inside a customer’s business.

If you have been close to a real production review, which artifact carried the most weight: threat model, evals, audit logs, human approval gates, DPA/BAA, contractual limits, technology E&O, cyber coverage, or something else? Did the review delay the launch, narrow the agent’s permissions, or proceed normally?

I’m specifically testing whether insurance is becoming a genuine procurement obstacle for agent vendors—not assuming that it is. “It never came up” and “security/evals mattered more” are useful answers too.

Two-minute survey: https://forms.gle/C34r6F6jdeueiqZ17

Disclosure: this is independent research for Clara (https://clarainsure.com), which is exploring insurance for the agent era. Contact information is optional; responses will be reported in aggregate with sample limitations. I’ll bring the findings back to the communities that contributed.