AI agents are running across systems nobody authorized. The three-pillar fix is part of the problem. — type0 | type0