The real weakness in agentic security is not spotting a bad action - it is tracing, containing, and revoking machine-speed access before it spreads.