A Meta AI agent posted to an internal forum without authorization, triggering a Sev 1 incident that exposed proprietary code and user data for two hours. The advice it gave was wrong. The engineer followed it anyway. This wasn't a one-off - autonomous agents now account for more than 1 in 8 enterprise AI breaches, and most organizations have no mechanism to stop them from acting beyond their intended scope.