Security architecture should follow the workload, not the storage model

As enterprises deploy AI agents, those agents increasingly hold credentials, query systems, retrieve documents, call tools, and take actions on someone's behalf. Functionally, they are becoming a new class of privileged principal — provisioned quickly, often outside the usual review, behaving differently every time they run. They have access without judgment.

You can have the best AI triage and investigation engine in the world. But if the detection signal is weak, or missing entirely, there is only so much AI can do.