Sarthak Aggarwal is co-founder and chief technology officer of Decawork, a Y Combinator-backed company building an agent control plane for IT teams. He wants enterprises to manage autonomous software with the same rigor they apply to employees: clear ownership, limited permissions, continuous oversight, and revocable access.
Aggarwal began contributing to open source at age 12 and became a Google Code-In global winner. At BITS Pilani, he led the student-run startup accelerator Conquest. He subsequently worked on systems software and AI infrastructure at NVIDIA, including systems deployed at OpenAI and Meta, and on enterprise AI at Ema. His public software projects include autopilot-shorts, prospector, tarmac, and Vartalap.
Aggarwal founded Decawork with chief executive Aman Raj, joining Y Combinator’s Summer 2026 batch. The company’s initial focus on autonomous IT administration expanded into managing identities, permissions, incidents, and audit trails across human and software workforces. In August 2026, Aggarwal announced its Product Hunt launch.
How Aggarwal approaches enterprise autonomy
- Agents as an enterprise workforce. Software operating with tools, memory, private data, and delegated permissions needs registration, accountable ownership, monitoring, investigation, and offboarding.
- Agent identity and delegated authority. Each action should distinguish the agent performing it from the person, service account, device, or workload authorizing it. OAuth Token Exchange helps represent delegation but does not establish a complete agent-specific identity standard.
- Security boundaries outside the model. Prompt instructions cannot reliably prevent consequential actions involving sensitive systems. Aggarwal advocates independent policy enforcement, scoped permissions, short-lived credentials, and rapid revocation.
- Privilege-separated agent execution. His enterprise-agent security architecture separates trusted planning, untrusted content processing, and capability-scoped tool execution. If a password-reset request conceals instructions to disable company-wide multifactor authentication, an independent policy gate rejects the unauthorized operation and records the attempt.
