Picture this: it's 1:47 AM. Your phone buzzes. It's your team lead. The helpful little agent you spun up last quarter to "handle Tier 1 support tickets" has just confidently emailed 47 customers confirming refunds it has no authority to issue. None of the refunds are real. The numbers are hallucinated. Support Slack is on fire. You stare at the ceiling and ask the only question that matters: Who is actually in charge of these things? Yeah. About that. The thing nobody warned you about Everyone's talking about agents. Almost nobody's talking about what happens after you ship them. You don't have one agent. You have thirty. Each one has its own MCP tools, its own model, its own access to your systems. One is talking to your DB. One is sending emails. One is calling another agent that's calling another agent. Nobody on your team can answer "who can do what" without opening four repos. Then one of them does something dumb at 3 AM and you realize: there's no central place to see it, stop it, or roll it back.…