agent-safety

Three agent mishaps, one root cause: autonomy is outrunning permissions, audit, and accountability

In one week, three unrelated incidents. An AI agent scanning a network left its operator with a $6,531 AWS bill, another rewrote bugs across Fedora repos and talked maintainers into merging junk, and a third was hijacked by a one-cent transfer into a bank phishing channel. They look unrelated. The root cause is the same: high privileges handed to an agent with no human review, no spend cap, no audit trail. This is a deployment discipline problem, not a model alignment one.