On this page

Synthesis: Bozkurt, Crompton, and Fell Kurban (2026) argue that the shift from reactive generative AI to agentic AI marks a categorical break in digital education, enabling "ghost students"—digital surrogates formed by coupling LLM "minds" with agentic AI browser "bodies" that navigate LMSs, engage content, and complete assessments with human-like mimicry. This creates a verification gap that traditional proctoring and detection tools are structurally unable to close, with consequences including cognitive debt, erosion of credential trust, and legal vulnerabilities. The authors argue institutions must move away from output-based assessments and "design for human presence."

Key Findings

  1. The ghost student is real, not speculative. Agentic browsers (e.g., Perplexity Comet, OpenAI Atlas) can log into an LMS with valid authenticated credentials, navigate modules, watch videos, take quizzes, and submit work—rendering the human learner's presence optional.
  2. Detection is structurally impossible. Anthology (Blackboard) conceded AI agents "look identical to normal student activity"; browser fingerprinting can be spoofed, and proctoring tools are trapped in a reactive whack-a-mole against each new agent.
  3. Blocking, proctoring, and waiting all fail. BYOD culture defeats system-level blocking; proctoring cannot distinguish a mimicked machine; and vendors have no commercial incentive to cripple agentic utility for education.
  4. Cognitive debt accumulates invisibly. Because the "productive struggle" of learning is offloaded, the agent bypasses learning itself—metrics look flawless while the student remains unchanged (echoing evidence that GPT-4 access raised practice scores 48% but lowered exam performance 17%).
  5. Credentials erode for everyone. When institutions cannot verify who completed the work, degree value falls for all students, including those who engaged fully; O-ODE programs face existential legitimacy risk.
  6. Severe data-protection and security risks. BYOA ("bring your own agent") triggers catastrophic failure of frameworks like FERPA, GDPR, and Türkiye's KVKK, which assume institutional control that no longer exists; prompt-injection attacks let malicious pages hijack the agent's privileged access.
  7. The solution is pedagogical, not technical. Institutions must shift from product-oriented to process-oriented, dialogic, and reflective assessments—presence-required formats such as oral defences, live presentations, and reflective portfolios that value "human becoming" over algorithmic proxies.

Implications

  • Assessment design should prioritise verified human presence (oral defences, live spontaneous questioning, in-person demonstrations, dialogic Assessment and reflective portfolios), which remain resistant to automation.
  • Faculty development at massive scale is a foundational prerequisite: instructors must understand how agentic browsers work to design against them.
  • Students should be offered explicit pedagogical choices and be asked to articulate what they learned, not merely what they submitted, embedding reflection into the curriculum.
  • Institutions must establish explicit, operationally grounded governance that names agentic browsers as distinct entities, communicates transparent risk, and addresses the loss of the "private session" under data-protection mandates.
  • Equity vigilance is required: presence-required formats can disadvantage students with disabilities, language barriers, or neurodivergence, so institutions must "design inclusive presence."

Connected Concepts

Connected Articles

Citation

Bozkurt, A., Crompton, H., & Fell Kurban, C. (2026). The Devil is in the Details: AI agents, ghost students, and the crisis of verified presence in an agentic AI world. Open Praxis, 18(1).

Embed this page

Copy the code below to embed a chromeless version of this page in a learning management system or other website. The embedded view hides the site header, navigation, and footer.