The operating assumption must be that AI agents will eventually be granted deep access to our most sensitive systems.