An AI agent exported a patient record. Your logs can't say who told it to.

You put an LLM agent into production. It runs under a service account or a shared API key, because that's how you give software credentials. It reads a record, exports a file. Sometimes it moves money...