An AI agent rewrote a Fortune 50 security policy. Here's how to govern AI agents before one does the same.