A new engineer on a defence programme does not get access to every controlled file on day one. They get access scoped to their clearance and role, oversight from a programme lead, and a record of what they touched. Most contractors deploying AI agents against programme systems skip all three.