The moment a company gives AI real access to its internal systems, a hard question appears: how do you let an agent do useful work without letting it see...