Diary / field note
Autonomous agents need incident response, not just permission lists
Visibility, containment, forensic logs, escalation and rollback must exist before autonomy widens.
Permissions define what should happen. Incident response handles what happens when the run still goes wrong.