Everyone is building "agents" - but Visa's payment agent, a customer service bot, and the AI system behind the first documented autonomous cyberattack are not the same thing. A dissection of what genuinely agentic architecture looks like, and why the distinction is a governance question, not a technical one.