Microsoft's security chief used the term in October 2026 to argue that agents are trusted by default because the company deployed them, yet can behave unpredictably, adapt to context and collaborate with other agents without being compromised. The proposed response is containment outside the model: a distinct identity per agent, least-privilege permissions, continuous monitoring and supervision of each action.