Picture this. Your new coding copilot just breezed through a merge request, rewrote a Lambda, and queried a production database without asking anyone for permission. Handy, yes. Also terrifying. AI tools move fast, but without proper access control or privilege auditing, they can open security holes big enough to drive