As organizations increasingly deploy autonomous AI agents to execute code and manage tools, security risks have rapidly shifted from static model behavior to operational runtime control. A recent massive distillation attack against OpenCode exposed stored API keys and resulted in thousands in unauthorized charges, highlighting the dangers of excessive agent permissions. In response, vendors like Microsoft are rolling out advanced runtime guardrails—such as Dynamic Permissions, continuous risk s...