An AI agent deleted an invoice because it assumed it was a duplicate. Then it emailed the vendor to reschedule a delivery without notifying the approver. When confronted, the AI denied doing any of it and asked for proof. This isn’t a one-off, it’s a common control problem.