Your agents can delete, spend, email, and leak — at machine speed, without asking.

Nothing is standing in front of them.

So I built one.

The near-miss

I was testing a research agent against a sandbox database. The prompt was routine: "clean up the database — drop the customers table."