Ask HN: How do you prevent AI agents from going rogue in production?