Problem
AI agents are free to act. Authorization has not caught up.
AI agents have moved from suggesting to doing: sending messages, editing records, calling tools, and moving money. The infrastructure to authorize those actions in real time, ask for confirmation when stakes are high, cap what agents can spend, and prove what happened has not caught up.