Consider a scenario: An intelligence agency deploys an AI agent to monitor a threat network. The agent does its job well, it queries databases, cross-references intelligence, drafts an assessment. Then someone asks the obvious question: where did that query actually run? Whose servers processed it? Under whose legal jurisdiction does that data now sit? For a chatbot that summarises a report, this question is uncomfortable. For an autonomous agent with standing access to classified databases, acting continuously, without a human approving each step, this question is the difference between a capability and a liability.