Enterprises are increasingly experimenting with agentic AI inside real workflows, and the security question is shifting from prompt quality to authority, logging, and control.