A European regulator has confirmed that autonomous AI agents are now breaking into real company systems, and its advice is a checklist any small or mid-sized business can start on this week.