Enterprise security assumes every action traces to a person with credentials and permissions. Agents don't fit. They learn, adapt, make decisions across contexts. Do we retrofit them into identity systems built for humans, or admit those systems can't contain what agents actually do?