Five Eyes intelligence agencies, CISA, NSA, Microsoft, and Palo Alto Networks have jointly established that autonomous AI agents represent a new class of security risk requiring architectural controls at design time. The guidance covers agentic frameworks broadly, with Microsoft Security Copilot and Azure AI Agent Service cited as reference implementations. No CVE is assigned; this is a governance and design-time risk item affecting any organization deploying agentic AI in production.