The real-world execution surface where an autonomous agent needs a human to complete the loop — why it's a marketplace problem, and the privacy angle most will get wrong.