AI agents expand the attack surface at machine speed. This article covers the Replit incident, consent fatigue, and runtime policy-based authorization.