An agent can misuse its authority because a prompt redirected it, because an ambiguous instruction or because its own reasoning produced an action no one anticipated.