The security layer is the OS boundary, not agent guardrails
Show operators running autonomous agents how the OS user and filesystem boundary, not the agent’s own guardrails, is the primary security layer, with the two layers that keep the agent out of `/var/www` and `wp-config.php` and the account that makes it so.