I am very worried about agent systems and governance.

We’re all watching the hazard play out in real time. Agents don’t need “intent” to incur real-world cost and consequence, they need task context, tool access, credentials, weak approval boundaries, and a runtime that can act. We’re missing the language necessary to describe Pathological Self-Asse