Your AI agent just did something it shouldn't. Here's the first hour.

Picture the message in your team chat: "Why did the support bot email a customer's invoice to an address nobody recognizes?" If your agent can call tools, this will happen to you in some form. It migh