Give every AI agent only the access its task needs, and watch for the intrusion nobody granted.