Identity programs built for employees are colliding with AI agents that can act, delegate, and persist without a hire date or departure notice.