The shift from chatbots to agents is happening because people want systems that take action. But giving AI access to real tools means permissions and security need to be part of the design from day one.