I Treated Agent Sessions as Portable Cache and Moved Control to a Policy Plane: Vendor Lock-In Became Manageable

Session migration preserves useful work context, but authentication, hooks, policies, MCP connections, and runtime controls stay behind. The durable answer is to place approval and audit controls outside the agent harness.