Inventory every identity, permission, tool, approval gate, and recovery path, then test whether the agent can exceed its assigned authority.