Research Article
The Devil is in the Details: AI Agents, Ghost Students, and the Crisis of Verified Presence in an Agentic AI World
Synthesis: Bozkurt, Crompton, and Fell Kurban (2026) argue that the shift from reactive generative AI to agentic AI marks a categorical break in digital education, enabling "ghost students"—digital surrogates formed by coupling LLM "minds" with agentic AI browser "bodies" that navigate LMSs, engage content, and complete assessments with human-like mimicry. This creates a verification gap that traditional proctoring and detection tools are structurally unable to close, with consequences including cognitive debt, erosion of credential trust, and legal vulnerabilities. The authors argue institutions must move away from output-based assessments and "design for human presence."
Key Findings
- The ghost student is real, not speculative. Agentic browsers (e.g., Perplexity Comet, OpenAI Atlas) can log into an LMS with valid authenticated credentials, navigate modules, watch videos, take quizzes, and submit work—rendering the human learner's presence optional.
- Detection is structurally impossible. Anthology (Blackboard) conceded AI agents "look identical to normal student activity"; browser fingerprinting can be spoofed, and proctoring tools are trapped in a reactive whack-a-mole against each new agent.
- Blocking, proctoring, and waiting all fail. BYOD culture defeats system-level blocking; proctoring cannot distinguish a mimicked machine; and vendors have no commercial incentive to cripple agentic utility for education.
- Cognitive debt accumulates invisibly. Because the "productive struggle" of learning is offloaded, the agent bypasses learning itself—metrics look flawless while the student remains unchanged (echoing evidence that GPT-4 access raised practice scores 48% but lowered exam performance 17%).
- Credentials erode for everyone. When institutions cannot verify who completed the work, degree value falls for all students, including those who engaged fully; O-ODE programs face existential legitimacy risk.
- Severe data-protection and security risks. BYOA ("bring your own agent") triggers catastrophic failure of frameworks like FERPA, GDPR, and Türkiye's KVKK, which assume institutional control that no longer exists; prompt-injection attacks let malicious pages hijack the agent's privileged access.
- The solution is pedagogical, not technical. Institutions must shift from product-oriented to process-oriented, dialogic, and reflective assessments—presence-required formats such as oral defences, live presentations, and reflective portfolios that value "human becoming" over algorithmic proxies.
Implications
- Assessment design should prioritise verified human presence (oral defences, live spontaneous questioning, in-person demonstrations, dialogic Assessment and reflective portfolios), which remain resistant to automation.
- Faculty development at massive scale is a foundational prerequisite: instructors must understand how agentic browsers work to design against them.
- Students should be offered explicit pedagogical choices and be asked to articulate what they learned, not merely what they submitted, embedding reflection into the curriculum.
- Institutions must establish explicit, operationally grounded governance that names agentic browsers as distinct entities, communicates transparent risk, and addresses the loss of the "private session" under data-protection mandates.
- Equity vigilance is required: presence-required formats can disadvantage students with disabilities, language barriers, or neurodivergence, so institutions must "design inclusive presence."
Connected Concepts
- Agentic AI
- Academic Integrity
- AI Misuse Learning Harm
- Cognitive Offloading
- Generative AI
- Higher Ed
- Online Teaching And Learning
- Governance
- Privacy
- Trust
- AI Detection
- Guardrails
- Student Engagement
- Metacognition
Connected Articles
- Agentic AI Education Scoping Review — Agentic AI in education: scoping review
- Agentic AI Pedagogical Best Practice 2026 — Agentic AI pedagogical best practice
- Agentic Workflows Education — Agentic workflows in education
- Agentic Literacy Debt — Agentic literacy debt
- Tool Invariant Framework Agentic AI — A tool-invariant framework for agentic AI
- Automated Online Exam Proctoring Decade Review 2026 — Automated online exam proctoring: a decade review
- Kirsanov Beyond Detection AI Online Assessments 2026 — Beyond detection: AI in online assessments
- Responsible Assessment AI Era Stanford 2026 — Responsible assessment in the AI era
- End Of Assessment AI Disruption Transformation 2026 — The end of assessment: AI disruption and transformation
Citation
Bozkurt, A., Crompton, H., & Fell Kurban, C. (2026). The Devil is in the Details: AI agents, ghost students, and the crisis of verified presence in an agentic AI world. Open Praxis, 18(1).