Agent controls need tests at the boundaryWe can test what an agent is allowed to touch without pretending to know everything about why it acts.19 Mar 2026agent-securityruntime-safetypermissionsreliabilitycorrections