AI agents are quietly taking over our WordPress stacks — writing content, moderating comments, syncing data, and running ops. But unlike human users, they don’t log out, they can act at scale, and when something goes wrong, nobody knows who’s responsible. In this lightning talk, we’ll explore what AI identity governance means, why the WordPress ecosystem urgently needs to start thinking about it, and what’s at stake if we don’t.