Why every AI agent security post says the same three things right now

A security vendor, an authorization company, and an independent researcher published on AI agent identity within weeks of each other and landed on the same three fixes. That's not a coincidence, and the reason is more useful than the advice itself.