Can an AI agent violate OFAC sanctions?

Yes — and this is not a hypothetical. If an AI agent with payment authority sends funds to a wallet on the SDN list, the transaction is a sanctions violation. The operator (the person or company that deployed the agent) is strictly liable — it doesn't matter that "the agent did it" or that you didn't know.