And here is the shift that changes everything. AI is no longer just a tool. It is a participant. NIST's most recent guidance describes AI agent systems as capable of planning and taking autonomous actions that affect real-world systems, as OpenClaw recently demonstrated. Once incidents become agentic, response cannot depend on heroic improvisation. It requires institutionalised, cross-border mechanisms.