Somewhere in your organization, an AI agent has permission to do real work. It reads records, updates systems, moves data, and finishes tasks without asking anyone, which is exactly what you hired it for. The same permission that lets it work also lets it do damage.