An AI agent needs an identity, and most enterprises have not issued one
Enterprise identity systems were built for two kinds of actor: people, and software that does the same thing every time. An agent is neither, and the gap between those categories is where the next class of incident is going to come from.