AI agents can act with valid credentials while hiding hijacked intent. Enterprise security needs agent-aware identity, provenance, and resource controls.