Agents will cheat; an agent OS doesn't let them