Why AI agents keep breaking loose