Your AI agents run day and night. They pull data, make predictions, and automate decisions. Somewhere in that process, a query hits a production database that contains real user records. Everything looks fine, until an over-permissioned agent fetches a column it never needed. The model learns from PII, logs it,