Your team just shipped an AI-powered feature. You scanned the code. Passed SAST. Reviewed the PR. Green across the board.
But here’s what you probably didn’t scan: the model weights. The agent framework. The dataset lineage. The MCP server that your agent calls at runtime.