(Un)governable: Agent Identity vs. Agentic Intent

The credential is bounded. The agent's intent is not. The EU AI Act holds you liable for both.

Executive Summary

Your security team has scoped the agent's permissions. Least privilege enforced. Service account credentials rotated. RBAC reviewed quarterly. The IAM dashboard shows green. The non-…