The first 24 hours of an AI agent security incident

Most of what I read on AI agent security follows the same shape: a taxonomy of risks, a list of governance principles and a call to “adopt responsible AI practices.” That’s useful for a board deck. when an autonomous agent with live credentials has just done something nobody authorized, and someone is asking me what happens next. I don’t want to write another framework.