Today, if your organization's AI agent makes a payment, changes a user's identity credentials, or executes a trade, most enterprise identity infrastructure has no mechanism to stop it — unless a human ...