Agents are moving from code generation into incident response. That makes read-only defaults, approval gates, evidence, and rollback discipline more important than the demo.