Risk advisory: agent failures escalate when authority is not contained