Blast radius is the new metric
Autonomous agents inherit credentials the way interns inherit shared logins: quietly, and all at once.
The teams doing this well scope tokens per task, expire them in minutes, and log every tool call as if it were a shell session.
Perimeter thinking
The perimeter did not disappear. It moved inside the loop.