Access Control Isn't Action Control for AI Agents
IAM answers whether an agent can enter a system. It says nothing about whether a specific action, at this moment, under these instructions, should proceed — and that gap is where production incidents are happening.