Enterprises racing to put AI agents into production are discovering that role-based access control, not model choice, decides whether those agents can be trusted