Why multi-agent AI security is broken (and the identity patterns that actually work)

Last Tuesday, a “harmless” coding agent in staging opened a PR, fetched secrets from the wrong...