Your IAM Model Has No Slot for AI Agents

AI agents need their own identity architecture, not a rebadged service account with broader access.