Excessive Agency

Excessive agency is the risk that an AI agent is granted more autonomy, permissions, or decision-making authority than intended. This can allow the agent to access enterprise systems, interact with sensitive data, execute workflows, or take actions beyond its approved business purpose, increasing operational, security, and compliance risk.