System failure, process failure, human error: your risk register has three columns. Agents add a fourth: the error that arrives through normal operation. What's your entropy budget?

The AI Security Gap. The documents were access-controlled, but RAG embeddings aren't. The folder had permissions; the vector has coordinates. The fix isn't a better model, and it isn't a sternly worded system prompt. It's architecture: permissions that survive embedding, identity-aware filtering at retrieval time, and a security review that treats the vector store as what it is—a copy of your most sensitive knowledge with the traditional locks filed off.