The Agentic Control Plane
A model can be fully safe and the system built around it still isn't, once it can call tools, invoke MCP servers, and touch infrastructure. The security boundary moved to the execution path, and it needs a control plane of its own.