It Was Never the Restriction

I took away an agent's ability to run commands, then its access to the registry, and measured what that costs. Then I ran the same matrix on two weaker models. The restriction cost 26% more per run; the weakest model never once went to look, and filed fourteen reports claiming a release that didn't exist.