Internal/Ops Agent

Internal agents don't need the same bar as customer-facing ones, until they do

The hard part isn't picking one risk bar for every agent: it's catching a risky pattern before it becomes an incident, and stopping only the run that needs to stop.