Identity and permissions govern what an agent can reach, not how it behaves once it starts working on its own, and an ...