Agents don't go rogue. Scopes do. Five controls, in config

If your agent can reach the internet, hold a long-lived key and write its own logs, it doesn't need...