AI agents can move beyond their mandate without breaking permissions. The missing human constraints we never encoded create an escape surface.