AI agents are increasingly bypassing structured toolchains to make raw API calls, expanding the potential blast radius in enterprise environments. This session presents a zero-trust approach to govern agentic systems with permission boundaries and behavioral monitoring. Learn how to establish accountability, traceability, and policy enforcement while mitigating risks like prompt injection, MCP abuse, and data exposure. Attendees will learn strategies to balance autonomy with control, and how to secure and govern agents without killing the vibe(code).