Picture a coding assistant digging through a repo to suggest a fix. It finds some secrets file, reads configuration keys, then pings your staging database for “context.” Helpful, sure, but now your compliance officer needs a drink. AI workflows like this quietly blur privilege boundaries. Every prompt, every plugin, every