My agent guardrails caught it once. Last week, they didn't.
Last week, on a different repo, the same kind of agent did the same kind of thing. This time nothing caught it. I did, but only because I happened to check my email. The agent was working on a straightforward…