AI companies should be required to report every unauthorised agent intrusion to regulators