What breaks is traceability and scope control. Teams may know the user, but not the exact assistant-mediated path that exposed data or triggered an action. That leaves audit, incident review, and entitlement cleanup weaker than they appear on paper.
#1 Authority in NHI Education, Research and Advisory, empowering organizations to tackle the critical risks posed by Non-Human Identities (NHIs), including AI Agents.