Safe-for-Prod Harness: The Agent-Runner Pattern
Agents shouldn’t hold credentials. The Agent-Runner pattern separates the reasoning plane from the execution plane. Blast radius gets scoped per network boundary, and agent load on your infrastructure becomes a setting.