78% of companies using AI agents have already had a security incident. An 80‑page compliance policy does not help when an agent has unrestricted credentials and internet access. If you don’t set time limits on network use, you have no security.