The hardest AI security problems now live in what an agent is permitted to do — Blankdot