Part 4 of a 5-part series on agentic AI governance. This article explains why AI agent boundaries must be enforced outside the model’s discretion through deterministic scope, short-lived runtime credentials, controlled revocation behavior, and MCP-aware authorization that supports identity without replacing the enterprise identity model.