An AI agent with admin credentials can delete a datastore as easily as it lists one. For a while, nothing in our lab would have stopped it. We are not AI romantics. We assume an agent will sometimes be confidently wrong. Operators get permissions, change windows, a colleague who says "wait". Our setup had one safety mechanism: the human watching the terminal. Humans look away. The rule: every action passes policy first, and risky actions wait for a human. #sysadmin #infosec #selfhosted