A developer fires up a coding copilot to fix a production bug. It scans the repo, touches a database, and suggests a patch. Fast, right? Except the copilot just saw customer data it was never cleared to access. Multiply that by dozens of copilots, agents, and connectors running in parallel,