Autonomous AI agents are being deployed at enterprise scale across the world's largest organisations. The legal and governance infrastructure to manage what they do has not kept pace. When those agents interact across organisational boundaries, that gap becomes a compliance exposure, a regulatory risk, and a question of directorial liability.

AI systems are not people under the law. In the future they may be. Even if AI systems become legally responsible in the future, we still face a fundamental problem. Human punishments for breaking the law do not work against synthetic stakeholders.