These things are not human, have no agency and cannot be held accountable.

We don’t need to restrict them from doing things, we need to default to allowing them to do things.

“My agent did XYZ because I allowed it to” is the only valid argument that can be made, and not not every agentic harnass is just a shell toolcall, every one I have built has a specific defined usecase and toolcalls that allows it to execute that usecase and no other usecase, because that is good practice.

Does that make it less capable, hell yes because I am held accountable for it’s actions by my stakeholders and the same should be true of others.

IT IS NOT ALIVE. This things are computer programs running in compute on a computer, you are responsible for their actions just like you would be responsible for the actions taken by a script run in a cron job.