The detection lag observed in Samsung Electronics' April 2023 ChatGPT incidents (three confidential pastes discovered after the fact by internal audit and self-report, leading to the 2 May 2023 restriction memo) was not a Samsung-specific operational failure. It was the structural output of running enterprise DLP, designed against email/file/removable-media egress channels, against a new egress class (paste-into-chat-interface) that the controls were not built for. Three years later, the structural gap remains the dominant detection failure in enterprise shadow-AI programmes, with the pattern now inverted: the 2023 case was unsanctioned external tools, the 2026 case is agentic capability silently activating inside approved tools (Microsoft 365 Copilot agents acquiring write capability, Custom GPTs created against corporate accounts, MCP servers connected by approved IDEs). The 2026 case is harder to detect because the egress destination is an approved vendor and the AI capability sits behind a procurement approval that did not assess the capability surface. The operational test for whether a programme has closed the Samsung gap is a 24-hour AI-capable-surface inventory, a confidential-document trace test, and an automatic update path when vendors ship new AI features into approved tools.

Claim is scoped to enterprise environments running mainstream DLP and CASB stacks. Smaller organisations and SMB programmes have different control profiles. 60-day review cadence. Trigger conditions for status changes: (1) a published vendor benchmark showing DLP coverage of agentic-AI channels above 90% on real enterprise environments (would weaken the structural argument because the controls have caught up); (2) a major 2026 shadow-AI incident with public post-mortem (would either confirm or refute the structural map depending on the specific detection-path failure); (3) a published independent assessment of enterprise shadow-AI controls maturity (Gartner / Forrester / IDC equivalent) that contradicts the directional reading on coverage gaps; (4) major vendors locking down Custom GPT / Copilot custom agent / MCP configuration behind enterprise-admin approval as a default rather than an opt-in (would weaken the 2026-pattern argument).