Picture this: a friendly AI copilot reads your source code, writes a patch, and then quietly drops a pull request that runs database migrations. Great productivity, until your compliance team starts sweating. AI tools now act like team members, touching APIs, credentials, and live data. In distributed pipelines, those invisible