1. Blast radius. If this agent did its worst 10 seconds right now, what's gone? Data, money, trust, reputation.
2. Commit authority. Can it write / send / spend / delete without a named human saying yes this one?
3. Rollback primitive. Is there a one-command undo wired in — and have we rehearsed it this quarter?
4. Audit trail. If a regulator / investor / customer asked tomorrow who did this, can you answer in under 60 seconds?