You've built an agent that works. Now you're scared to let it run. Our CTO wrote the piece you've been waiting for: how to move security out of prompts and into infrastructure. When less capability makes your agent smarter, and why OAuth isn't enough.