The Agent Can. But Should It? AI agents treat every permission they hold as a mandate. Why access controls cannot define authority, and the authorization model finance teams can enforce.
