Picture a developer asking their AI copilot to run a script on production, fetch fresh customer data, or patch a pipeline. Innocent commands, until they aren't. AI now sits everywhere—coding assistants, agents, and auto-remediation bots—each one capable of acting fast but often without constraints. They execute,