Your AI agent has permission to act. Who has permission to take responsibility? Picture the audit log after an incident. A record was changed, a permission was widened, a workflow ran. The log says alice . Alice was in a meeting and never touched the system. An agent, running on credentials it borrowed from her, did it. That is the first accountability gap: your records must say who, or what, acted. The log says Alice. Alice didn't do it. When an agent runs under a human's cr...