The critical question is what AI agents are authorized to do: how they trigger workflows, execute tasks and operate within delegated permissions.