Half the organisations running AI agents have already had one step outside its permissions. Nearly half of the agents in production have no monitoring at all. Only about a fifth treat an agent as something with an identity of its own.
Source: [Dev.to](https://dev.to/olegvdv/i-tried-to-forge-my-own-ai-agents-audit-log-3chh)