The moment an AI system can read internal systems, trigger workflows, move money, send emails, update records or approve actions, the risk profile changes.