You don't fix this with a smarter agent. You fix it with the layer you skipped: one governed layer that sits between all your data and all your AI. Every agent asks the layer. No agent reaches the raw data on its own.
Now those four questions get answered in one place, for every agent — who may ask, what may leave, what must be hidden, what must be logged. Answered once, so every agent gets the same answer.
But governing access is only part of what the layer does. It also turns your scattered data — databases, documents, systems — into knowledge an agent can actually find and use: bringing it together, structuring it, connecting it, keeping it current. That work belongs in the layer too. Governance is one job of many.
Building that layer is what knowledge engineering does — and it's much more than governance. You've done a version of this before: when you built an integration layer, you put one system in the middle, and every application connected through it instead of straight to each other. It's the same idea, now applied to the one flow you haven't centralized yet: the knowledge your AI uses.