Picture an AI agent sprinting through a data warehouse. It grabs whatever it can find, builds a report, and feeds results into another model. It looks beautiful in demos. In production, though, that same freedom can turn into a compliance grenade. Developers want read access, auditors want proof, and security