Identity programs built NHI controls on one assumption: machines execute, they don’t decide. Agentic AI broke that. Agents request access dynamically, chain permissions across APIs, spawn subagents, and authorize in real time with no human in the loop. This session shares a framework for governing agents as their own identity class, drawn from real deployments. Leave with an audit checklist and a 90 day roadmap before agents outpace security.