I got pinged last week by an engineer deploying agents across their team. They'd built a smart customer-service agent that pulled from their CRM, updated account records, and sent follow-up emails. It worked great in testing. By day three in production, someone had realized the agent could delete customer records. Not "might be able to if...