A growing class of AI risk is not about model failure alone - it is about legacy identity and infrastructure becoming the back door into agentic systems.