Nearly every enterprise believes its AI agents are properly scoped. Only a third have actually made sure of it.