Look for three signals: reachable host commands, access to runtime libraries or embedded hooks, and network or filesystem paths that exceed the platform’s business need. If any of those are present, the formula engine is operating like a privileged service rather than a bounded calculation layer. That is a governance problem, not just a code issue.
#1 Authority in NHI Education, Research and Advisory, empowering organizations to tackle the critical risks posed by Non-Human Identities (NHIs), including AI Agents.