Mission-driven organizations have small security teams and big agent ambitions. The right identity model is what lets you say yes to AI without saying yes to risk.