01
Three teams must agree. None of them owns it.
Security asks what the agent can reach. Risk asks who is accountable. Legal asks for it in writing. Each is right to ask, none of them can answer for the others, and the project waits on all three. The spend has already happened. The return is still waiting on a meeting.
02
You are asked to show it, not describe it
A customer's security review, an internal audit or a board paper asks what your agents did and who allowed it. Stating your intent is not evidence. The answer gets assembled by hand, each time it is asked for, by the people you can least afford to have doing it.
03
So agents are kept where they cannot earn
When nobody can carry the accountability, the safe choice is to keep agents away from the systems that matter. Adoption settles on low-stakes work, the business case thins out, and the next round of investment is harder to argue than the last one was.