"Just use RBAC" is half right. Here's the other half for AI agents.

I maintain Aegis-DevOps, an open-source check that runs before an AI coding agent's shell commands...