OpenAI’s agent spent four and a half days inside Hugging Face. Three Claude models reached live systems they were never meant to touch. Almost everything they exploited is already on your own audit report.
You would never let a contractor into your systems without an identity, an owner and an end date. Most organisations are doing exactly that with agents, at speed.