Why AI agent governance feels harder than traditional security models

I’ve been trying to wrap my head around AI agent governance, and the more I look into it, the more it feels like we’re applying old mental models to something that doesn’t quite behave the same way. With traditional systems, governance is relatively structured. You define access, enforce policies, m