Comment by Julio Rivera

Companies do not need to abandon AI. They need to deploy it with discipline. Every agent should have a distinct identity, clearly defined access rights, and an audit trail showing what it did. Where practical, credentials should be short-lived, and permissions should be easy to revoke. Large financial transfers, changes to production systems, and the release of sensitive information should trigger stronger approval requirements. Smaller companies can begin with basic steps: restrict permissions, require human confirmation for consequential actions, maintain reliable backups and assign responsibility for monitoring automated systems.