Picture an AI agent that writes patient summaries from clinical notes. Smooth, automated, brilliant. Then someone asks it to predict outcomes, and suddenly it is reading unmasked PHI directly from a production database. The logs fill with secrets, compliance alarms flash, and a small fire starts in your SOC 2