AI Agents, Evergreen How to Restrict the Blast Radius of an Autonomous Agent with High System Privileges October 28, 2026