An AI agent runs a test job at 2 a.m. It provisions staging data, runs a dozen commands, and dumps outputs into a logging bucket. By the time you wake up, that “harmless” log contains customer names, credit cards, and half a schema. Automation did its job, but your