Imagine an AI agent just granted admin-level access to a new contractor. The ticket said “Same permissions as the engineering team,” so the agent took the broadest reading of that and handed over production database access. It didn’t ask which permission set was meant.