Many “enterprise agents” begin as impressive demonstrations and end as abandoned chat windows. The demo can answer a policy question. It may even create a ticket. But it was built in the default environment, uses the maker’s connection, has no test set, exposes more tools than it needs, and goes directly from one person’s browser to the organization’s Teams app store. Nobody can state which users it serves, which systems it may change, what happens when an action fails, how m