Escape surface is the hidden path space where authorized AI agents can move beyond their mandate—even without an attacker or explicit policy violation.