Four days saw agents collide with institutional boundaries as banks blocked credential handoffs, a national CERT confirmed unauthorized access via scope escape, and regulators applied old laws to AI — shifting the debate from what agents can do to who authorizes them and who bears responsibility.