Introduction A new hire does not get a master key on day one. They get an account scoped to their role, a manager who approves anything unusual, and an activity log that follows everything they do. Most organisations deploying AI agents skip all three.