The hard limits of an autonomous agent: what keeps it from disaster

The limits that separate an experiment from an agent you'd leave running: iteration and token caps treated as a budget, command and path allowlists, a kill switch, idempotency and observability.