Explanation

Excessive agency occurs when LLM systems are granted autonomy beyond their reliability and control maturity, allowing cascading failures across connected systems. Attackers exploit autonomy boundaries to amplify impact from a single prompt or model misclassification. The challenge is governance of action authority, not just model output quality.