Agents that act on enterprise data need more than a good model — governed tables, narrow tools, real permissions and a cost ceiling. What has to be true first.
