The more autonomous AI systems become, the less I think individual security tools are enough. Right now we have agents with tool access, browser access, MCP servers, memory, workflows, external actions, and long running sessions. Most of the conversation is focused on models. I think the bigger problem is governance. Who approves high risk actions? How do you stop poisoned content from becoming instructions? How do you audit what happened after the fact? How do you track memory dri...